CVE:CVE-2007-5640
CNNVD:CNNVD-200710-430
Nortel IP Phone、IP Softphone等都是Nortel所发布的IP电话设备。
Nortel IP Phone在处理伪造的注册消息时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。
如果远程攻击者向连接了UNIStim IP电话的服务器发送了伪造的注册消息的话，就可能强制合法的IP电话从服务器注销，用户必须重新注册并认证才能恢复IP电话的功能。
solution:Upgrade nortel business_communications_manager to a higher version than 50,50a,50e,200,400,1000,srg50,srg200,and avoid the version 50,50a,50e,200,400,1000,srg50,srg200; Upgrade nortel centrex_ip_client_manager to a higher version than *; Upgrade nortel centrex_ip_element_manager to a higher version than *; Upgrade nortel meridian_option_11c to a higher version than *; Upgrade nortel meridian_option_51c to a higher version than *; Upgrade nortel meridian_option_61c to a higher version than *; Upgrade nortel meridian_option_81c to a higher version than *; Upgrade nortel meridian_sl100 to a higher version than cs2100,and avoid the version cs2100; Upgrade nortel mobile_voice_client_2050 to a higher version than *