Description
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.
References
- http://voipshield.com/research-details.php?id=119
- 31640 vdb-entry
- 32203 third-party-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223
- nortel-mcs-snoop-weak-security(45752) vdb-entry
- ADV-2008-2779 vdb-entry