VULNERABILITY INTELLIGENCE

CVE-2008-5872

CVSS score7.8 HIGH
EPSS probability1.92%
CISA KEVNot currently listed
Published2009-01-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C

Description

Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100 3.0.13 allow remote attackers to cause a denial of service (device outage) via a UFTP message that has a negative block size or other crafted Connection Details values.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references