Description
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Nortel Wireless LAN Access Point 2200 Series - Denial of Service EDB-23786 · dos · Mar 2, 2004 · verified
GitHub 1 repository
-
alt3kx/CVE-2004-2549 ★ 0 · Apr 3, 2018
Nortel Wireless LAN Access Point 2200 Series - Denial of Service
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 1009294 vdb-entry
- 9787 vdb-entry
- nortel-accesspoint-telnet-dos(15373) vdb-entry
- 20040301 Nortel Networks Wireless LAN Access Point 2200 DoS + PoC mailing-list
- 4128 vdb-entry
- http://www116.nortelnetworks.com/docs/bvdoc/wlan/216109a.pdf
- 11034 third-party-advisory