Lucent vulnerabilities

8 vulnerabilities

Known vulnerabilities in Lucent products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 17 products.

Products

17
7.5CVE-2001-1376ascendradius+11
EPSS score
8.54%
Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.
7.5CVE-2001-1081lucentradius+1
EPSS score
2.76%
Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.
5CVE-2001-1377freeradiusfreeradius+10
EPSS score
5.42%
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.
5CVE-2001-1082lucentradius+1
EPSS score
1.41%
Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.
10CVE-2001-0534lucentradius+1
EPSS score
6.66%
Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.
5CVE-1999-0060lucentascend_max_router+2
EPSS score
8.62%
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool.
5CVE-2002-2148lucentascend_max_router+1
EPSS score
1.37%
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response.
7.5CVE-2002-0236lucentvitalanalysis+4
EPSS score
7.41%
Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.