----------------------------------------------------------------------

Secunia Network Software Inspector 2.0 (NSI) - Public Beta

The Public Beta has ended. Thanks to all that participated.

Learn more:
http://secunia.com/network_software_inspector_2/

----------------------------------------------------------------------

TITLE:
Nortel Multimedia Communication Server PC Client Buffer Overflow

SECUNIA ADVISORY ID:
SA30038

VERIFY ADVISORY:
http://secunia.com/advisories/30038/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
Nortel Multimedia Communication Server 5100 3.x
http://secunia.com/product/15893/
Nortel Multimedia Communication Server 5100 4.x
http://secunia.com/product/14612/

DESCRIPTION:
A vulnerability has been reported in Nortel Multimedia Communication
Server (MCS), which can be exploited by malicious people to cause a
DoS (Denial of Service).

The vulnerability is caused due to an error within the Multimedia PC
Client and can be exploited to cause a buffer overflow by e.g.
flooding the system on certain unspecified ports.

The vulnerability is reported in versions prior to Maintenance
Release 3.5.8.3 and 4.0.25.3.

SOLUTION:
Update to Maintenance Release 3.5.8.3 and 4.0.25.3 (see vendor's
advisory for details).

PROVIDED AND/OR DISCOVERED BY:
The vendor credits Parvez Anwar.

ORIGINAL ADVISORY:
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=719698

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------