CVE-1999-0060: Medium severity Lucent Ascend MAX Router vulnerability
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Java Configurator toolfrom your environment.Uninstall or discontinue use of the Java Configurator tool where possible to avoid using the discard port on Ascend MAX and Pipeline routers.
- Configuration
Disable the discard port on Ascend MAX and Pipeline routers if it is not required (the discard port is used by the Java Configurator tool and can be targeted with a malformed packet to cause DoS).
Lucent Ascend MAX and Pipeline routers (discard port) discard port = disabled if not required - Compensating control
If the discard port must remain enabled, restrict access to it to trusted management hosts only (apply firewall rules or ACLs at the network perimeter and on router management interfaces to block untrusted networks).
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0060?
CVE-1999-0060 is classified as a denial of service vulnerability.
How do I fix CVE-1999-0060?
To fix CVE-1999-0060, ensure that the affected Ascend MAX and Pipeline routers are patched to the latest firmware version.
Which products are affected by CVE-1999-0060?
CVE-1999-0060 affects various versions of the Lucent Ascend MAX and Pipeline routers.
What types of attacks can exploit CVE-1999-0060?
CVE-1999-0060 can be exploited by sending malformed packets to the discard port of the routers.
Is CVE-1999-0060 being actively exploited?
As of the latest reports, there is no indication that CVE-1999-0060 is being actively exploited in the wild.