Lightwave ConsoleServer 3200 Password Brute Force Vulnerability

Bugtraq ID:	2577
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 10 2001 12:00AM
Updated:	Apr 10 2001 12:00AM
Credit:
Vulnerable:	Lightwave ConsoleServer 3200
Not Vulnerable:

Lightwave ConsoleServer 3200 Password Brute Force Vulnerability

Lightwave's ConsoleServer 3200 is a system console switch with a remote administration feature.

The device does not limit successive login attempts to user accounts on the system's telnet service.

By repeatedly trying password combinations for arbitrary user accounts, an attacker may be able to gain some degree of privilege on the device and further compromise its security.

Lightwave ConsoleServer 3200 Password Brute Force Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Lightwave ConsoleServer 3200 Password Brute Force Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Lightwave ConsoleServer 3200 Password Brute Force Vulnerability

References:

• ConsoleServer 3200 (Lightwave)