CVE-2004-2377 Denial of service in n/a
Remote attackers can cause a denial of service reboot on Alcatel OmniSwitch devices by performing specific network scans.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2004-2377?
CVE-2004-2377 is a medium-severity denial of service vulnerability in n/a, published on 16 Aug 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans, as demonstrated using a Nessus port scan of ports 1 through 1024 with safe-checks disabled.
Which versions are affected by CVE-2004-2377?
It affects 2 products.
Products include Alcatel Omniswitch, Alcatel Omniswitch 7800.
How do I fix CVE-2004-2377?
No fix has been published for CVE-2004-2377 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2004-2377 being exploited?
There is no known exploitation of CVE-2004-2377 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-hr3h-86gx-c4cp.