Secunia

Description

Nortel Networks has acknowledged multiple vulnerabilities in Nortel CallPilot, which potentially can be exploited by malicious, local users to gain escalated privileges, or by malicious people to cause a DoS (Denial of Service), or compromise a user's system or vulnerable system.

For more information:
SA16480
SA17160
SA17161

The vulnerabilities has been reported in versions 3.0 and 4.0. The vulnerability in MS05-050 (SA17160) also affects versions 1.07 and 2.x.

Solution
The vendor recommends to follow the instructions in Security Advisory P-2005-0056-Global (access to this document requires an active support agreement with Nortel).
Further details available in Customer Area

Original Advisory
Nortel Networks:
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=366955&RenditionID=
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=366956&RenditionID=
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=366837&RenditionID=

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area