consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Alterpath_manager | Cyclades | 1.2.1 (including) | 1.2.1 (including) |
References
- http://marc.info/?l=full-disclosure\u0026m=110924450827137\u0026w=2
- http://secunia.com/advisories/14378
- http://www.cirt.net/advisories/alterpath_console.shtml
- http://www.osvdb.org/14075
- http://marc.info/?l=full-disclosure\u0026m=110924450827137\u0026w=2
- http://secunia.com/advisories/14378
- http://www.cirt.net/advisories/alterpath_console.shtml
- http://www.osvdb.org/14075