CVE-2002-2148

Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://online.securityfocus.com/archive/1/284650
http://www.iss.net/security_center/static/9704.php
http://www.securityfocus.com/bid/5335

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:lucent:ascend_max_router:2.0:::::::*
	cpe:2.3:h:lucent:ascend_max_router:3.0:::::::*
	cpe:2.3:h:lucent:ascend_max_router:4.0:::::::*
	cpe:2.3:h:lucent:ascend_max_router:5.0:::::::*
	cpe:2.3:h:lucent:ascend_max_router:5.0_ap48:::::::*
	cpe:2.3:h:lucent:ascend_pipeline_router:1.0:::::::*
	cpe:2.3:h:lucent:ascend_pipeline_router:2.0:::::::*
	cpe:2.3:h:lucent:ascend_pipeline_router:3.0:::::::*
	cpe:2.3:h:lucent:ascend_pipeline_router:4.0:::::::*
	cpe:2.3:h:lucent:ascend_pipeline_router:5.0:::::::*
	cpe:2.3:h:lucent:ascend_pipeline_router:6.0:::::::*
	cpe:2.3:h:lucent:ascend_pipeline_router:6.0.2:::::::*
	cpe:2.3:h:lucent:dslterminator::::::::

History

No history.

Information

Published : 2002-12-31 05:00

Updated : 2023-12-10 10:17

NVD link : CVE-2002-2148

Mitre link : CVE-2002-2148

CVE.ORG link : CVE-2002-2148

JSON object : View

Products Affected

lucent

ascend_pipeline_router
dslterminator
ascend_max_router

CWE

NVD-CWE-Other

{"id": "CVE-2002-2148", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-12-31T05:00:00.000", "references": [{"url": "http://online.securityfocus.com/archive/1/284650", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/9704.php", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5335", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response."}], "lastModified": "2008-09-05T20:32:27.417", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lucent:ascend_max_router:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98D08C67-F634-41DB-AB33-B029A4AB9417"}, {"criteria": "cpe:2.3:h:lucent:ascend_max_router:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C90F2EE-AE20-4D17-9DC9-01C84BBE7696"}, {"criteria": "cpe:2.3:h:lucent:ascend_max_router:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1A06F55-2174-4825-A348-A6D65F94C7A0"}, {"criteria": "cpe:2.3:h:lucent:ascend_max_router:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "627B08BB-DC4E-49F3-AE22-CD50906FB337"}, {"criteria": "cpe:2.3:h:lucent:ascend_max_router:5.0_ap48:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C2DD62A-F471-4664-98F7-FDCCEAEB7F59"}, {"criteria": "cpe:2.3:h:lucent:ascend_pipeline_router:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A2DCBCB-4B58-4463-B8D5-DABC654AD524"}, {"criteria": "cpe:2.3:h:lucent:ascend_pipeline_router:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "703FD9A7-8E68-4DC8-B4C6-346BDED1FEA7"}, {"criteria": "cpe:2.3:h:lucent:ascend_pipeline_router:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D064ECCA-FFBA-4932-9803-5F939B9451ED"}, {"criteria": "cpe:2.3:h:lucent:ascend_pipeline_router:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FF57770-EC66-4E2B-8A8C-817854BCBBB4"}, {"criteria": "cpe:2.3:h:lucent:ascend_pipeline_router:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3583D347-AED3-4469-8D36-1C873A7E4459"}, {"criteria": "cpe:2.3:h:lucent:ascend_pipeline_router:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D182FD25-327B-4B7C-89B3-5A91053C5666"}, {"criteria": "cpe:2.3:h:lucent:ascend_pipeline_router:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DCA3F19-31BF-4E92-ABC1-75148D6298EA"}, {"criteria": "cpe:2.3:h:lucent:dslterminator:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C20CA752-C161-465B-A4AC-D25165F8E7EA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}