BreakingPoint Storm CTM Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	54785
Class:	Design Error
CVE:	CVE-2012-2963 CVE-2012-2964
Remote:	Yes
Local:	No
Published:	Aug 02 2012 12:00AM
Updated:	Aug 02 2012 12:00AM
Credit:	Jeff Jarmoc of Dell SecureWorks
Vulnerable:
Not Vulnerable:

BreakingPoint Storm CTM Multiple Information Disclosure Vulnerabilities

BreakingPoint Storm CTM is prone to multiple remote information-disclosure vulnerabilities.

A remote attacker can exploit these issues to obtain sensitive information, possibly aiding in further attacks.

BreakingPoint Storm CTM 2.1.0.0 Build 71254 is vulnerable; other versions may also be affected.

BreakingPoint Storm CTM Multiple Information Disclosure Vulnerabilities

Attackers can use readily available networking tools to exploit these issues.

BreakingPoint Storm CTM Multiple Information Disclosure Vulnerabilities

Solution:
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

BreakingPoint Storm CTM Multiple Information Disclosure Vulnerabilities

References:

• BreakingPoint Storm Homepage (Breakingpoint systems)
  
• BreakingPoint Systems Storm CTM information disclosure vulnerabilities (Michael Orlando)