A remote overflow exists in Nortel VPN Gateway Browser-Based Management Interface (BBI). With a specially crafted request, an attacker can cause a denial of service or gain interactive OS access resulting in a loss of integrity and/or availability.
Classification
Location:
Remote/Network Access Required
Attack Type:
Authentication Management,
Denial of Service
Impact:
Loss of Confidentiality,
Loss of Availability
Solution:
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
Solution
Upgrade to version 5.1.7, 6.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.