Multiple Lucent Router UDP Port 9 Information Disclosure Vulnerability

Bugtraq ID:	5335
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 27 2002 12:00AM
Updated:	Jul 27 2002 12:00AM
Credit:	Published by FX <[email protected]> and kim0 <[email protected]>.
Vulnerable:	Lucent DSLTerminator Lucent Ascend Pipeline Router 6.0.2 Lucent Ascend Pipeline Router 6.0 Lucent Ascend Pipeline Router 5.0 Lucent Ascend Pipeline Router 4.0 Lucent Ascend Pipeline Router 3.0 Lucent Ascend Pipeline Router 2.0 Lucent Ascend Pipeline Router 1.0 Lucent Ascend MAX Router 5.0 ap48 Lucent Ascend MAX Router 5.0 Lucent Ascend MAX Router 4.0 Lucent Ascend MAX Router 3.0 Lucent Ascend MAX Router 2.0 Lucent Ascend MAX Router 1.0 Ascend Pipeline 5.0 .0A Ascend MAX 5.0 .0Ap42
Not Vulnerable:	Lucent Ascend TNT Router 2.0.3 Lucent Ascend TNT Router 2.0 Lucent Ascend TNT Router 1.0

Multiple Lucent Router UDP Port 9 Information Disclosure Vulnerability

Several Lucent Router product lines include support for a configuration tool which communicates over UDP on port 9.

If a specially crafted packet is sent to some of these devices on UDP port 9, a response is issued which contains sensitive information. This information may be of aid in further attacks against the network or device.

Multiple Lucent Router UDP Port 9 Information Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Lucent Router UDP Port 9 Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Lucent Router UDP Port 9 Information Disclosure Vulnerability

References:

• Lucent Homepage (Lucent)
  
• Phenoelit Advisory (Phenoelit Group)