CVE-2004-0056 json
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP…
published 2004-01-15 22 y ago modified 2026-06-16 4 mo ago also EUVD-2004-0056
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.8%
- EPSS 3.8% chance of exploitation in 30 days, percentile 90%
- public exploits
- 0
- none known
Summary
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
Patch / fix
- kb.cert.org/vuls/id/749342 advisory
- cert.org/advisories/CA-2004-01.html advisory
Exploit prediction
3.81% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
kb.cert.org
/vuls/id/749342
third-party-advisory, patch, us-government-resource
-
cert.org
/advisories/CA-2004-01.html
third-party-advisory, patch, us-government-resource
-
securityfocus.com
/bid/9406
vdb-entry
-
securitytracker.com
/id?1008687
vdb-entry
- uniras.gov.uk /vuls/2004/006489/h323.htm
Sources
- CVE List CVE-2004-0056
- NVD CVE-2004-0056
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.