PT-2017-14774

Name of the Vulnerable Software and Affected Versions Radware Alteon versions 31.0.0.0 through 31.0.3.0 Description The issue allows an attacker to perform an adaptive-chosen ciphertext attack, also known as a Bleichenbacher attack, on observed traffic encrypted with the RSA cipher. This enables...

CVE-2017-17427: Observable Discrepancy

Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext attack "Bleichenbacher attack". This allows an attacker to decrypt observed traffic that has been encrypted with the RSA cipher and to perform other private key operations...

Alteon OS BBI (Nortell) - Multiple Vulnerabilities XSS and CSRF

No description provided by source. Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: = 21.0.8.3 and may be higher =25.1.0.0 Tested on: relevant os Code : exploit code From: DSecRG research dsecr...

Alteon AceDirector Half-Closed HTTP Request IP Address Revealing Vulnerabililty

No description provided by source. source: http://www.securityfocus.com/bid/3964/info Alteon ACEdirector is a hardware solution distributed by Nortel Networks. ACEdirector runs the Nortel WebOS operating system. It is possible to retrieve the real IP addresses of webservers that are managed by an...

Alteon OS XSS / XSRF

Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS and XSRF vulnerabilities were identified in the Alteon OS Browser-Based Interface BBI. Application: Alteon OS BBI Versions Affected: Nortel XSRF /switchSystem.html/bar?banner=newBanner/scri...

[DSECRG-09-062] Alteon OS BBI (Nortell) - Multiple Vulnerabilities

Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS and XSRF vulnerabilities were identified in the Alteon OS Browser-Based Interface BBI. Application: Alteon OS BBI Versions Affected: = 21.0.8.3 and may be higher =25.1.0.0 Vendor URL:...

Alteon OS BBI (Nortell) - Cross-Site Scripting Cross-Site Request Forgery

Alteon OS BBI Nortell - Cross-Site Scripting Cross-Site Request Forgery Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: Date: Mon, 16 Nov 2009 14:01:04 +0300 Digital Security Research Group...

Alteon OS BBI (Nortell) - Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: Date: Mon, 16 Nov 2009 14:01:04 +0300 Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS an...

Alteon OS BBI (Nortell) - Multiple Vulnerabilities XSS XSRF

Exploit for unknown platform in category web applications ============================================================= Alteon OS BBI Nortell - Multiple Vulnerabilities XSS / XSRF ============================================================= Exploit Title: Alteon OS BBI Nortell - Multiple...

Alteon ACEswitch 180e Default Password (deprecated)

Binary data 4838.prm...

CVE-2002-0209

Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing SLB and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the...

CVE-2002-0209

CVE-2002-0209 affects Nortel Alteon ACEdirector WebOS 9.0 with SLB and Cookie-Based Persistence enabled. A remote attacker can determine the real IP address of a web server when a half-closed session is present, causing ACEdirector to send packets from the server without mapping to the virtual IP...

CVE-2002-0209: Undefined Security Weakness

Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing SLB and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the...

CVE-2002-0209

Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing SLB and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the...

Alteon AceDirector - Half-Closed HTTP Request IP Address Revealing

Alteon AceDirector - Half-Closed HTTP Request IP Address Revealing source: https://www.securityfocus.com/bid/3964/info Alteon ACEdirector is a hardware solution distributed by Nortel Networks. ACEdirector runs the Nortel WebOS operating system. It is possible to retrieve the real IP addresses of...

Alteon AceDirector - Half-Closed HTTP Request IP Address Revealing

source: https://www.securityfocus.com/bid/3964/info Alteon ACEdirector is a hardware solution distributed by Nortel Networks. ACEdirector runs the Nortel WebOS operating system. It is possible to retrieve the real IP addresses of webservers that are managed by an ACEdirector. When a client is...