« Volver al listado

CVE-2008-6579

Estado: ModificadaMedia (5)—

Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to phones and administrators."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Nortel — Cs1000

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-6579",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-04-01T22:30:01.203",
  "references": [
    {
      "url": "http://osvdb.org/44377",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/29747",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1019846",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/28691",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.voipshield.com/research-details.php?id=28",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41805",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/44377",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/29747",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1019846",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/28691",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.voipshield.com/research-details.php?id=28",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41805",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to \"web resources to phones and administrators.\""
    },
    {
      "lang": "es",
      "value": "Nortel Communication Server 1000 4.50.x permite a atacantes remotos obtener estructuras de aplicación Web a través de vectores desconocidos relacionados con \"recursos web de teléfonos y administradores\"."
    }
  ],
  "lastModified": "2026-06-16T23:02:30.633",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4AE008D-E790-4D77-A541-841C4E0896A8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}