medium5.0Public exploit code
CVE-2002-0209
Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alteon AceDirector - Half-Closed HTTP Request IP Address Revealing2001-12-20 · remote · hardware · Verified
Impact
Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nortel | Alteon Acedirector | Version 9.0 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/252455
- http://online.securityfocus.com/archive/1/261548
- http://www.iss.net/security_center/static/8010.php
- http://www.securityfocus.com/bid/3964
- http://online.securityfocus.com/archive/1/252455
- http://online.securityfocus.com/archive/1/261548
- http://www.iss.net/security_center/static/8010.php
- http://www.securityfocus.com/bid/3964