Nortel Wireless LAN Access Point 2200 Series Denial Of Service Vulnerability

Bugtraq ID:	9787
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 02 2004 12:00AM
Updated:	Mar 02 2004 12:00AM
Credit:	Discovery of this vulnerability has been credited to Alex Hernandez.
Vulnerable:	Nortel Networks WLAN Access Point 2225 Nortel Networks WLAN Access Point 2221 Nortel Networks WLAN Access Point 2220
Not Vulnerable:

Nortel Wireless LAN Access Point 2200 Series Denial Of Service Vulnerability

Nortel Wireless LAN Access Point 2200 series appliances have been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when a large network request is handled by one of the Wireless LAN Access Point default administration services. This will reportedly cause the Access Point Appliance Operating service to crash, effectively denying service to legitimate users.

Nortel Wireless LAN Access Point 2200 Series Denial Of Service Vulnerability

Mark Ludwik has submitted the following proof of concept exploit:

• /data/vulnerabilities/exploits/WLAN-DoS.c

Nortel Wireless LAN Access Point 2200 Series Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Nortel Wireless LAN Access Point 2200 Series Denial Of Service Vulnerability

References:

• Nortel Networks Homepage (Nortel Networks)