CVE-2004-2549: Buffer Overflow

Published Dec 31, 2004

Updated

Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow.

Affected Software

3 affected components

Nortel Wlan Access Point 2221

Nortel Wlan Access Point 2225

Nortel Wlan Access Point 2220

Event History

Dec 31, 2004

CVE Published

05:00 AM

Nov 21, 2005

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2004-2549?

CVE-2004-2549 is classified as a denial of service vulnerability that can cause the affected Nortel Wireless LAN Access Points to crash.

How do I fix CVE-2004-2549?

To mitigate CVE-2004-2549, it is recommended to disable the Telnet and HTTP services on affected Nortel Wireless LAN Access Points.

Which devices are affected by CVE-2004-2549?

CVE-2004-2549 affects Nortel Wireless LAN Access Point models 2220, 2221, and 2225.

Can CVE-2004-2549 be exploited remotely?

Yes, CVE-2004-2549 can be exploited remotely by sending a specially crafted TCP request to the affected devices.

What are the affected services in CVE-2004-2549?

CVE-2004-2549 impacts the Telnet service on TCP port 23 and the HTTP service on TCP port 80.