|
Nortel Centrex IP Client Manager Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA18311
|
|
|
Release Date:
|
2006-01-12
|
|
Popularity:
|
7,314 views
|
|
|
Critical:
|
Extremely critical
|
|
Impact:
|
Security Bypass
Exposure of sensitive information
Privilege escalation
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| OS: | Nortel Centrex IP Client Manager (CICM)
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-1790
CVE-2005-2827
CVE-2005-2829
CVE-2005-2830
CVE-2005-2831
CVE-2005-4560
CVE-2006-0010
|
|
Description:
Nortel Networks has acknowledged multiple vulnerabilities in Centrex IP Client Manager, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to view potentially sensitive information, to trick users into downloading and executing arbitrary programs, and to compromise a user's system.
For more information:
SA15368
SA15821
SA18255
SA18365
Solution:
The vulnerabilities will be fixed in the upcoming 2.5, 7.0, 8.0, and 9.0 maintenance releases.
Filter traffic to affected systems and do not browse untrusted web sites or open image files from untrusted sources.
Original Advisory:
http://www130.nortelnetworks.com/cgi-...p;DocumentOID=375525&RenditionID=
http://www130.nortelnetworks.com/cgi-...p;DocumentOID=375420&RenditionID=
Other References:
SA15368:
http://secunia.com/advisories/15368/
SA15821:
http://secunia.com/advisories/15821/
SA18255:
http://secunia.com/advisories/18255/
SA18365:
http://secunia.com/advisories/18365/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
