PT-2003-1237 · Enterasys · Enterasys Ssr8000

Published 2003-04-02 · Updated 2008-09-05 · CVE-2002-1501

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Enterasys SSR8000 versions prior to 8.3.0.10

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by performing multiple port scans to specific ports. API Endpoints: ports 15077 and 15078 are targeted.

Recommendations For versions prior to 8.3.0.10, update to firmware version 8.3.0.10 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2002-1501

Affected Products

Enterasys Ssr8000

References · 6

• 🔥 http://securityfocus.com/bid/5703 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-09/0141.html · Exploit
• 🔥 https://exploit-db.com/exploits/21791 · Exploit
• http://enterasys.com/support/techtips/tk0659-9.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1501 · Security Note
• http://iss.net/security_center/static/10096.php · Vendor Advisory