CVE-2002-2148
Summary
| CVE | CVE-2002-2148 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2002-12-31 05:00:00 UTC |
| Updated | 2008-09-05 20:32:00 UTC |
| Description | Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Lucent | Ascend Max Router | 2.0 | All | All | All |
| Hardware | Lucent | Ascend Max Router | 3.0 | All | All | All |
| Hardware | Lucent | Ascend Max Router | 4.0 | All | All | All |
| Hardware | Lucent | Ascend Max Router | 5.0 | All | All | All |
| Hardware | Lucent | Ascend Max Router | 5.0_ap48 | All | All | All |
| Hardware | Lucent | Ascend Max Router | 2.0 | All | All | All |
| Hardware | Lucent | Ascend Max Router | 3.0 | All | All | All |
| Hardware | Lucent | Ascend Max Router | 4.0 | All | All | All |
| Hardware | Lucent | Ascend Max Router | 5.0 | All | All | All |
| Hardware | Lucent | Ascend Max Router | 5.0_ap48 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 1.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 2.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 3.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 4.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 5.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 6.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 6.0.2 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 1.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 2.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 3.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 4.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 5.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 6.0 | All | All | All |
| Hardware | Lucent | Ascend Pipeline Router | 6.0.2 | All | All | All |
| Hardware | Lucent | Dslterminator | All | All | All | All |
| Hardware | Lucent | Dslterminator | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SecurityFocus | BUGTRAQ | online.securityfocus.com | |
| ISS X-Force Database: lucent-port9-information-disclosure (9704): Multiple Lucent router UDP port 9 could disclose sensitive information | XF | www.iss.net | |
| Multiple Lucent Router UDP Port 9 Information Disclosure Vulnerability | BID | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.