Nortel Application Gateway 2000 'adminDownloads.htm' Password Disclosure Vulnerability

Bugtraq ID:	34520
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 14 2009 12:00AM
Updated:	Apr 15 2009 03:16PM
Credit:	Bernhard Muller and David Matscheko of SEC Consult
Vulnerable:	Nortel Networks Application Gateway 2000 6.2.551 Nortel Networks Application Gateway 2000 6.1.1.437 Nortel Networks Application Gateway 2000 6.1.0.409 Nortel Networks Application Gateway 2000 6.1.0.409
Not Vulnerable:	Nortel Networks Application Gateway 2000 6.3.1

Nortel Application Gateway 2000 'adminDownloads.htm' Password Disclosure Vulnerability

Nortel Application Gateway 2000 is prone to a password-disclosure vulnerability due to a design error.

Attackers can exploit this issue to gain access to the administrator's password. Successfully exploiting this issue may lead to other attacks.

Nortel Application Gateway 2000 'adminDownloads.htm' Password Disclosure Vulnerability

An attacker can use a web client to exploit this issue.

Nortel Application Gateway 2000 'adminDownloads.htm' Password Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Nortel Application Gateway 2000 'adminDownloads.htm' Password Disclosure Vulnerability

References:

• Application Gateway 2000 Homepage (Nortel)
  
• SEC Consult SA-20090415-1 :: Nortel Application Gateway 2000 Password Disclosur (Bernhard Mueller)
  
• SEC Consult SA-20090415-1 :: Nortel Application Gateway 2000 (Bernhard Mueller )
  
• AG2000 Potential Password Disclosure Vulnerability (Nortel)