OSVDB ID: 43704

Title: Nortel VPN Gateway Browser-Based Management Interface (BBI) Username Remote Overflow

Info

Disclosure

Apr 01, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in Nortel VPN Gateway Browser-Based Management Interface (BBI). With a specially crafted request, an attacker can cause a denial of service or gain interactive OS access resulting in a loss of integrity and/or availability.

Classification

Location: Remote/Network Access Required
Attack Type: Authentication Management, Denial of Service
Impact: Loss of Confidentiality, Loss of Availability
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified

Solution

Upgrade to version 5.1.7, 6.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Nortel Networks

VPN Gateway

<5.1.7

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/36218