PT-2002-3127 · Allied Telesyn+1 · Allied Telesyn At-8024+1

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2415

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Allied Telesyn AT-8024 version 1.3.1 Rapier 24 switches (affected versions not specified)

Description The issue allows remote authenticated users to cause a denial of service in the management interface by sending a stream of zero bytes via UDP to a running service.

Recommendations For Allied Telesyn AT-8024 version 1.3.1, consider restricting access to the management interface until a fix is available. For Rapier 24 switches, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2002-2415

Affected Products

Allied Telesyn At-8024

Rapier 24

References · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-11/0291.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2415 · Security Note
• http://securityfocus.com/bid/6233 · Note
• http://iss.net/security_center/static/10680.php · Note