Nokia Electronic Documentation - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Nokia Electronic Documentation - Multiple Vulnerabilities Release Date: 09/15/2003 Application: NED Nokia Electronic Documentation Platform: Windows NT4 and WebLogic tested others may be...

Nokia Electronic Documentation 5.0 - Cross-Site Scripting

Nokia Electronic Documentation 5.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8626/info Nokia Electronic Documentation NED has been reported prone to a cross-site scripting vulnerability. The issue has been conjectured to present itself due to a lack of sufficient sanitizati...

Nokia Electronic Documentation 5.0 - Path Disclosure

Nokia Electronic Documentation 5.0 - Path Disclosure source: https://www.securityfocus.com/bid/8624/info Nokia Electronic Documentation NED is prone to a vulnerability that may enable remote attackers to list directory contents. This issue may be exploited by appending a dot . to a request for a...

Nokia Electronic Documentation 5.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8626/info Nokia Electronic Documentation NED has been reported prone to a cross-site scripting vulnerability. The issue has been conjectured to present itself due to a lack of sufficient sanitization performed on user supplied data. A remote attacker may...

Nokia Electronic Documentation 5.0 - Path Disclosure

source: https://www.securityfocus.com/bid/8624/info Nokia Electronic Documentation NED is prone to a vulnerability that may enable remote attackers to list directory contents. This issue may be exploited by appending a dot . to a request for a NED page. Exploitation will also have the side-effect...

Nokia Electronic Documentation 5.0 - Connection redirection

source: https://www.securityfocus.com/bid/8625/info A vulnerability has been discovered in Nokia Electronic Documentation NED that may allow an attacker to redirect connections to a third party system. The problem likely occurs due to the NED server failing to sufficiently verify hosts provided...

Nokia Gateway GPRS support node vulnerable to DoS

Overview A vulnerability in the Nokia Gateway GPRS support node GGSN may allow a remote attacker to cause a denial of service. Description A vulnerability in the GGSN may allow a remote attacker to restart the device. For technical details, please see the @stake Security Advisory Nokia GGSN IP650...

Nokia GGSN DoS

IP packet with invalid options causes device to crash...

Nokia GGSN (IP650 Based) DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: Nokia GGSN IP650 Based DoS Release Date: 06/09/2003 Application: Nokia GGSN IP650 Based Platform: Nokia GGSN IP650 Based Severity: An attacker is able to cause GGSN to kernel panic Authors:...

Nokia IPSO Voyager WebGUI readfile.tcl file Parameter Arbitrary File Access

The remote host includes a CGI /cgi-bin/readfile.tcl which allows anyone to read arbitrary files on the remote host with the privileges of the HTTP daemon typically 'nobody'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From: Jonas Eriksson mailto:[email protected] Date: 23/04/2003 To:...

Nokia IPSO directory traversal

Directory traversal in /cgi-bin/readfile.tcl accessible via Web-Interface...

Nokia IPSO 3.4.x - Voyager ReadFile.TCL Remote File Reading

Nokia IPSO 3.4.x - Voyager ReadFile.TCL Remote File Reading source: https://www.securityfocus.com/bid/7426/info It has been reported that Nokia IPSO does not properly handle some types of requests through Voyager. Because of this, an attacker with access to the interface may be able to view...

Nokia IPSO Vulnerability

There is a remote security vulnerability in the Nokia IPSO operating system. Anyone with access to the webgui Voyager on the Nokia IP-box can read any file on the system. For example, login as the user 'monitor' disabled by default and use the readfile.tcl to read any file:...

Nokia IPSO 3.4.x - Voyager ReadFile.TCL Remote File Reading

source: https://www.securityfocus.com/bid/7426/info It has been reported that Nokia IPSO does not properly handle some types of requests through Voyager. Because of this, an attacker with access to the interface may be able to view potentially sensitive information...

CVE-2003-0137

SNMP daemon in the DX200 based network element for Nokia Serving GPRS support node SGSN allows remote attackers to read SNMP options via arbitrary community strings...

CVE-2003-0137

The CVE affects the SNMP daemon in the DX200-based Nokia SGSN network element. It allows remote attackers to read SNMP options by using arbitrary community strings, enabling partial information disclosure. No remediation details are provided in the supplied documents. Exploitation status or in-th...

Nokia SGSN (DX200 Based Network Element) SNMP issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Nokia SGSN DX200 Based Network Element SNMP issue Release Date: 03/13/2003 Application: Nokia SGSN DX200 Based Network Element Platform: DX200 Severity: An attacker is able to read SNMP...

Nokia SGSN SNMP information leak

SNMP read access is possible with any community name...

Nokia SGSN DX200 - Remote SNMP Information Disclosure

source: https://www.securityfocus.com/bid/7081/info It has been reported that some models of the SGSN made by Nokia do not properly handle remote requests for information. Vulnerable devices may disclose sensitive information which could enable an attacker may be able to mount further attacks on...

Nokia SGSN DX200 - Remote SNMP Information Disclosure

Nokia SGSN DX200 - Remote SNMP Information Disclosure source: https://www.securityfocus.com/bid/7081/info It has been reported that some models of the SGSN made by Nokia do not properly handle remote requests for information. Vulnerable devices may disclose sensitive information which could enabl...