OSVDB ID: 31152 Title: Nortel Networks MIPCD Telnet Session Hijacking |
Info |
|
|
Dates |
||||
|
|
Description |
The Nortel MIPCD contains a flaw that may allow a malicious user to resume administrative telnet sessions. The issue is triggered when an administrator disconnects without properly logging out, which allows any user connecting via telnet to resume the administrative session. This may result in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Authentication Management Impact: Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Upgrade to version 1.5 (11-19-2002) or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |