RETIRED: Nokia Siemens Networks Flexi ISN Multiple Authentication Bypass Vulnerabilities
BID:34299
Info
RETIRED: Nokia Siemens Networks Flexi ISN Multiple Authentication Bypass Vulnerabilities
| Bugtraq ID: | 34299 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 30 2009 12:00AM |
| Updated: | Apr 13 2009 04:46PM |
| Credit: | TaMbaRuS |
| Vulnerable: |
Nokia Siemens Networks Flexi ISN 3.1 |
| Not Vulnerable: | |
Discussion
RETIRED: Nokia Siemens Networks Flexi ISN Multiple Authentication Bypass Vulnerabilities
The Nokia Siemens Networks Flexi ISN (Intelligent Service Node) device is prone to multiple authentication-bypass vulnerabilities because its web-based management interface fails to restrict access to certain administration scripts.
An attacker can exploit these issues to gain unauthorized access to the affected device, which may lead to other attacks.
These issues affect Flexi ISN 3.1; other devices or versions may also be vulnerable.
UPDATE (April 6, 2009): This issue is disputed. Reports indicate that the device is not vulnerable as described. We will update this BID as more information emerges.
NOTE: This BID is being retired because the vulnerability cannot be exploited as described.
The Nokia Siemens Networks Flexi ISN (Intelligent Service Node) device is prone to multiple authentication-bypass vulnerabilities because its web-based management interface fails to restrict access to certain administration scripts.
An attacker can exploit these issues to gain unauthorized access to the affected device, which may lead to other attacks.
These issues affect Flexi ISN 3.1; other devices or versions may also be vulnerable.
UPDATE (April 6, 2009): This issue is disputed. Reports indicate that the device is not vulnerable as described. We will update this BID as more information emerges.
NOTE: This BID is being retired because the vulnerability cannot be exploited as described.
Exploit / POC
RETIRED: Nokia Siemens Networks Flexi ISN Multiple Authentication Bypass Vulnerabilities
Attackers may exploit these issues via a browser.
The following example URIs are available:
http://www.example.com/cgi-bin/aaa.tcl?
http://www.example.com/cgi-bin/aggr_config.tcl?
http://www.example.com/opt/cgi-bin/ggsn/cgi.tcl?page=ggsnconf
http://www.example.com/opt/cgi-bin/services.tcl?instance=default
Attackers may exploit these issues via a browser.
The following example URIs are available:
http://www.example.com/cgi-bin/aaa.tcl?
http://www.example.com/cgi-bin/aggr_config.tcl?
http://www.example.com/opt/cgi-bin/ggsn/cgi.tcl?page=ggsnconf
http://www.example.com/opt/cgi-bin/services.tcl?instance=default
Solution / Fix
RETIRED: Nokia Siemens Networks Flexi ISN Multiple Authentication Bypass Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RETIRED: Nokia Siemens Networks Flexi ISN Multiple Authentication Bypass Vulnerabilities
References:
References:
- Vendor Homepage (Nokia Siemens Networks)