Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Lucent VitalNet Password Authentication Bypass Vulnerability

VitalNet is part of Lucent's VitalSuite SP product family. VitalNet allows users to monitor, analyze, manage and predict the performance of their network infrastructure.

The implementation of VitalNet's cookie-based authentication mechanism is flawed. An attacker who successfully guesses a correct username can gain access to the server without need of a valid password.







 

Privacy Statement
Copyright 2008, SecurityFocus