Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, e 2225 consentire ad aggressori remoti di causare un denial of service (servizio di crash) tramite una richiesta TCP con una stringa di grandi dimensioni, seguito da 8 caratteri di nuova riga, a (1) la servizio Telnet sulla porta TCP 23 e (2) il servizio HTTP sulla porta TCP 80, forse a causa di un buffer overflow. |
http://www.securityfocus.com/bid/9787 http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0055.html http://www116.nortelnetworks.com/docs/bvdoc/wlan/216109a.pdf http://www.osvdb.org/4128 http://securitytracker.com/id?1009294 http://secunia.com/advisories/11034 https://exchange.xforce.ibmcloud.com/vulnerabilities/15373 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2549 |
Vulnerabilità: CVE-2004-2549
