PT-2004-3440 · Nortel · Nortel Wireless Lan Access Point

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2549

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Nortel Wireless LAN (WLAN) Access Point (AP) versions 2220, 2221, and 2225

Description The issue allows remote attackers to cause a denial of service, resulting in a service crash. This can be achieved by sending a TCP request with a large string, followed by 8 newline characters, to specific services. The affected services include the Telnet service on TCP port 23 and the HTTP service on TCP port 80. The cause of the issue might be related to a buffer overflow.

Recommendations For versions 2220, 2221, and 2225, consider restricting access to the Telnet service on TCP port 23 and the HTTP service on TCP port 80 to minimize the risk of exploitation. As a temporary workaround, consider disabling the Telnet and HTTP services until a patch is available. Avoid sending large strings followed by newline characters to the affected services until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-2549

Affected Products

Nortel Wireless Lan Access Point

References · 9

• 🔥 http://securityfocus.com/bid/9787 · Exploit
• 🔥 https://exploit-db.com/exploits/23786 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2549 · Security Note
• http://secunia.com/advisories/11034 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15373 · Note
• http://www116.nortelnetworks.com/docs/bvdoc/wlan/216109a.pdf · Note
• http://osvdb.org/4128 · Note
• http://securitytracker.com/id?1009294 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0055.html · Note