Aastra 9480i CT Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	48264
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 14 2011 12:00AM
Updated:	Jun 14 2011 12:00AM
Credit:	Pr0T3cT10n
Vulnerable:	Aastra 9480i CT 0
Not Vulnerable:

Aastra 9480i CT Multiple Information Disclosure Vulnerabilities

Aastra 9480i CT is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input.

Attackers can exploit these issues using directory-traversal strings to confirm the existence of local files outside of the WordPress webroot. Information obtained can aid in launching further attacks.

Aastra 9480i CT Multiple Information Disclosure Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Aastra 9480i CT Multiple Information Disclosure Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Aastra 9480i CT Multiple Information Disclosure Vulnerabilities

References:

• Aastra Homepage (Aastra Technologies Limited)