-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
AA-2009.0127                  AUSCERT Advisory

                                   [Win]
            Nortel Contact Center Manager: Inappropriate Access
                                27 May 2009
- ---------------------------------------------------------------------------

        AusCERT Advisory Summary
        ------------------------

Product:              Nortel Contact Center Manager
Operating System:     Windows
Impact:               Inappropriate Access
Access:               Remote/Unauthenticated
Member content until: Wednesday, June 24 2009

OVERVIEW:

      Nortel has released two security bulletins identifying vulnerabilities
      in the Nortel Contact Center Manager.


IMPACT:

      "The Nortel Contact Center Manager Administration Server web 
      application relies on client side cookies to check the roles of 
      authenticated users. Authentication can be bypassed by manually 
      setting the required cookies. By exploiting this vulnerability, an 
      attacker can bypass authentication and access the Nortel Contact 
      Center Manager Administration web administration." [1]

      "The Nortel Contact Center Manager Server web application provides a 
      SOAP interface. This interface does not need authorisation and 
      responds to certain requests with sensitive information." [2]


MITIGATION:

      Please refer to the Nortel advisories [1, 2] for fixes to your specific 
      product.


REFERENCES:

      [1] Contact Center Authentication Bypass
          http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=905698

      [2] Contact Center Potential Password Disclosure
          http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=905808

AusCERT has made every effort to ensure that the information contained
in this document is accurate.  However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iD8DBQFKHLKzNVH5XJJInbgRAuQrAJ9Ar58Cy+D5PeDtUL69Dr9LfrfdYgCggvU4
gf6MTGcryblxfe5JfsZiV64=
=m0s1
-----END PGP SIGNATURE-----