← Vulnerability feed

Vulnerability record · CVE-2004-0056 · published 17 February 2004

CVE-2004-0056: Nortel business communications manager vulnerability

Nortel · Business Communications Manager

Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

7.5 CVSS 2.0 High EPSS 3.8% · top 10.3%
7.5CVSS 2.0 base score
3.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.cert.org/advisories/CA-2004-01.html PatchThird Party AdvisoryUS Government Resource
http://www.kb.cert.org/vuls/id/749342 PatchThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/9406
http://www.securitytracker.com/id?1008687
http://www.uniras.gov.uk/vuls/2004/006489/h323.htm
http://www.cert.org/advisories/CA-2004-01.html PatchThird Party AdvisoryUS Government Resource
http://www.kb.cert.org/vuls/id/749342 PatchThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/9406
http://www.securitytracker.com/id?1008687
http://www.uniras.gov.uk/vuls/2004/006489/h323.htm

Track CVE-2004-0056 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.1CVE-2007-5640Nortel business communications manager vulnerabilityThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile…EPSS 1.8%5.0CVE-2005-0356TCP PAWS timestamp handling allows remote connection lossMultiple TCP implementations that enable the timestamps option with Protection Against Wrapped Sequence Numbers (PAWS) can be forced to discard valid…EPSS 83%analysed4.3CVE-2007-5637Nortel business communications manager information exposure vulnerabilityThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and ot…EPSS 3.1%4.3CVE-2007-5638Nortel business communications manager information exposure vulnerabilityThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and ot…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2004-0056), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.