TITLE:
Nortel CallPilot Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA17509

VERIFY ADVISORY:
http://secunia.com/advisories/17509/

CRITICAL:
Highly critical

IMPACT:
Privilege escalation, DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
Nortel CallPilot
http://secunia.com/product/6094/

DESCRIPTION:
Nortel Networks has acknowledged multiple vulnerabilities in Nortel
CallPilot, which potentially can be exploited by malicious, local
users to gain escalated privileges, or by malicious people to cause a
DoS (Denial of Service), or compromise a user's system or vulnerable
system.

For more information:
SA16480
SA17160
SA17161

The vulnerabilities has been reported in versions 3.0 and 4.0. The
vulnerability in MS05-050 (SA17160) also affects versions 1.07 and
2.x.

SOLUTION:
The vendor recommends to follow the instructions in Security Advisory
P-2005-0056-Global (access to this document requires an active support
agreement with Nortel).
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?level=6&category=8&subcategory=7&subtype=&DocumentOID=363252&RenditionID=REND359659

ORIGINAL ADVISORY:
Nortel Networks:
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=366955&RenditionID=
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=366956&RenditionID=
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=366837&RenditionID=

OTHER REFERENCES:
SA16480:
http://secunia.com/advisories/16480/

SA17160:
http://secunia.com/advisories/17160/

SA17161:
http://secunia.com/advisories/17161/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------