CVE-2004-2549
Nortel WLAN Access Point 2220, 2221, 2225 - Denial of Service via TCP Request with Large String and Newlines
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-2549. PoCs published by Alex Hernandez, alt3kx.
AI-analyzed exploit summary This exploit sends a large buffer (2024 bytes of 'A' followed by 8 newlines) to a specified host and port, causing a denial of service in Nortel Wireless LAN Access Point 2200 series appliances by crashing the Access Point Appliance Operating service.
Description
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow.
Exploits (2)
This exploit sends a large buffer (2024 bytes of 'A' followed by 8 newlines) to a specified host and port, causing a denial of service in Nortel Wireless LAN Access Point 2200 series appliances by crashing the Access Point Appliance Operating service.
The repository contains only a README with minimal information about CVE-2004-2549, referencing an Exploit-DB entry but lacking any exploit code or technical details.