Description

Nortel Networks has acknowledged a vulnerability in Nortel Threat Protection System, which can be exploited by malicious people to compromise a vulnerable system.

For more information:
SA17220

The vulnerability affects TPS 2050IS,TPS 2070DC,TPS 2070IS,TPS 2150IS and TPS 2170IS running the following software versions:
* Nortel Threat Protection System Intrusion Sensor 4.1
* Nortel Threat Protection System Defense Center 4.1

NOTE: Threat Protection System Defense Center is not directly vulnerable, but includes a vulnerable version of Snort.

Solution
Apply Nortel TPS Snort Engine Update (SEU) #6.
Further details available in Customer Area

Changelog
Further details available in Customer Area

Original Advisory
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=362187&RenditionID=
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=363396&RenditionID=

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area