The web console in CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689.
http://www.securityfocus.com/bid/26013
http://www.securityfocus.com/archive/1/482021/100/0/threaded
http://www.eleytt.com/advisories/eleytt_ETRUSTITM2.pdf