Description
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks.
References
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
- nortel-unistim-dos(41801) vdb-entry
- 44379 vdb-entry
- 29747 third-party-advisory
- http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC
- 28691 vdb-entry
- 1019847 vdb-entry