7.8high
CVE-2008-6576
Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when…
Published 17 y ago · modified 4 mo ago · JSON
CVSS
7.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.0%
percentile 81%
Public exploits
0
none known
Summary
Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service (resource exhaustion and failed updates) via unknown vectors that causes consumption of all available sessions.
Exploit prediction (EPSS)
1.98% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
References
- support.nortel.com /go/main.jsp?cscat=BLTNDETAIL&id=713455 · x_refsource_CONFIRM, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/41804 · vdb-entry, x_refsource_XF, x_transferred
- secunia.com /advisories/29747 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- securitytracker.com /id?1019845 · vdb-entry, x_refsource_SECTRACK, x_transferred
- osvdb.org /44380 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityfocus.com /bid/28691 · vdb-entry, x_refsource_BID, x_transferred
- voipshield.com /research-details.php?id=11 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2008-6576
- NVD: CVE-2008-6576
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.