|
Nortel Centrex IP Client Manager Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA17223
|
|
|
Release Date:
|
2005-10-18
|
|
Last Update:
|
2005-11-11
|
|
Popularity:
|
7,749 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Privilege escalation
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| OS: | Nortel Centrex IP Client Manager (CICM)
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-0803
CVE-2005-1978
CVE-2005-1979
CVE-2005-1980
CVE-2005-2117
CVE-2005-2118
CVE-2005-2119
CVE-2005-2120
CVE-2005-2122
CVE-2005-2123
CVE-2005-2124
CVE-2005-2126
CVE-2005-2127
CVE-2005-2307
|
|
Description:
Nortel Networks has acknowledged multiple vulnerabilities in Centrex IP Client Manager, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and gain escalated privileges, and by malicious people to cause a DoS (Denial of Service), or compromise a user's system or vulnerable system.
For more information:
SA14631
SA16065
SA16480
SA17161
SA17163
SA17166
SA17168
SA17498
Solution:
The vulnerabilities will be fixed in the upcoming 2.5, 7.0, and 8.0 maintenance releases.
Filter traffic to affected systems and do not browse untrusted web sites or open WMF/EMF files from untrusted sources.
Changelog:
2005-11-11: Vendor acknowledged vulnerabilities in MS05-053. Updated advisory.
Original Advisory:
http://www130.nortelnetworks.com/cgi-...p;DocumentOID=361442&RenditionID=
http://www130.nortelnetworks.com/cgi-...p;DocumentOID=366742&RenditionID=
Other References:
SA14631:
http://secunia.com/advisories/14631/
SA16065:
http://secunia.com/advisories/16065/
SA16480:
http://secunia.com/advisories/16480/
SA17161:
http://secunia.com/advisories/17161/
SA17163:
http://secunia.com/advisories/17163/
SA17166:
http://secunia.com/advisories/17166/
SA17168:
http://secunia.com/advisories/17168/
SA17498:
http://secunia.com/advisories/17498/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
