SEC Consult SA-20090415-1 :: Nortel Application Gateway 2000 Password Disclosure Vulnerability

SEC Consult Security Advisory 20090415-1 ========================================================================== title: Nortel Application Gateway 2000 Password Disclosure Vulnerability program: Nortel Application Gateway 2000 vulnerable version: 6.3.1 and prior homepage:...

Nortel Application Gateway 2000 'adminDownloads.htm'密码泄漏漏洞

BUGTRAQ ID: 34520 CNCAN ID：CNCAN-2009041501 Nortel Application Gateway 2000是一款应用网关，包括融合语音和数据通信的应用。 Nortel Application Gateway存在设计错误，远程攻击者可以利用漏洞获得敏感信息。 Nortel Application Gateway提供管理员接口"Nortel Administration Tool powered by Citrix"，在部分条件下，接口会应答敏感信息给未授权用户，通过访问URL "https://server:3001/"，子帧...

Nortel Application Gateway 2000 Password

SEC Consult Security Advisory ========================================================================== title: Nortel Application Gateway 2000 Password Disclosure Vulnerability program: Nortel Application Gateway 2000 vulnerable version: 6.3.1 and prior homepage: http://www.nortel.com/ag2000...