Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Nortel Communication Server 1000 4.50.x lets attackers run commands

CVE-2008-6578 · published 17 years ago
Summary

The 4.50.x version of Nortel Communication Server 1000 can be accessed from the network to run commands that were not intended. This could let an attacker raise their access level, view confidential data, or shut down the system. Install any security updates from Nortel and limit network access to the server while the patches are applied.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
nortel cs1000 4.50
cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*
Original advisory text
Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive information, or cause a den...
Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive information, or cause a denial of service via unknown vectors.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
3% chance of attack within 30 days
Timeline
Published1 Apr 2009
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2008-6578 · NVD
Track software like this
Free during beta