CVE-2002-0209: Medium severity Nortel Alteon ACEdirector vulnerability
Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0209?
CVE-2002-0209 is considered a moderate severity vulnerability due to the potential for revealing internal network structures.
How do I fix CVE-2002-0209?
To fix CVE-2002-0209, consider upgrading to a non-vulnerable version of Nortel Alteon ACEdirector or disabling the Server Load Balancing and Cookie-Based Persistence features.
What systems are affected by CVE-2002-0209?
CVE-2002-0209 specifically affects Nortel Alteon ACEdirector version 9.0.
What are the risks associated with CVE-2002-0209?
The risks associated with CVE-2002-0209 include the exposure of real IP addresses of internal web servers, potentially leading to further attacks.
Is CVE-2002-0209 exploitable remotely?
Yes, CVE-2002-0209 can be exploited remotely by attackers with network access to the affected devices.