<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: lucent</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2002-2149: Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a d</title><link>https://patchthecve.com/cve/CVE-2002-2149.html</link><guid>https://patchthecve.com/cve/CVE-2002-2149.html</guid><pubDate>Tue, 16 Jun 2026 22:00:44 +0000</pubDate><description>MEDIUM 5.0: Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface.</description></item><item><title>CVE-2002-2148: Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTermin</title><link>https://patchthecve.com/cve/CVE-2002-2148.html</link><guid>https://patchthecve.com/cve/CVE-2002-2148.html</guid><pubDate>Tue, 16 Jun 2026 22:00:44 +0000</pubDate><description>MEDIUM 5.0: Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to lea</description></item><item><title>CVE-2002-0236: Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote </title><link>https://patchthecve.com/cve/CVE-2002-0236.html</link><guid>https://patchthecve.com/cve/CVE-2002-0236.html</guid><pubDate>Tue, 16 Jun 2026 21:57:03 +0000</pubDate><description>HIGH 7.5: Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.</description></item><item><title>CVE-2001-1377: Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, w</title><link>https://patchthecve.com/cve/CVE-2001-1377.html</link><guid>https://patchthecve.com/cve/CVE-2001-1377.html</guid><pubDate>Tue, 16 Jun 2026 21:56:09 +0000</pubDate><description>MEDIUM 5.0: Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.</description></item><item><title>CVE-2001-1376: Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to c</title><link>https://patchthecve.com/cve/CVE-2001-1376.html</link><guid>https://patchthecve.com/cve/CVE-2001-1376.html</guid><pubDate>Tue, 16 Jun 2026 21:56:08 +0000</pubDate><description>HIGH 7.5: Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.</description></item><item><title>CVE-2001-0619: The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do no</title><link>https://patchthecve.com/cve/CVE-2001-0619.html</link><guid>https://patchthecve.com/cve/CVE-2001-0619.html</guid><pubDate>Tue, 16 Jun 2026 21:54:38 +0000</pubDate><description>HIGH 7.5: The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to.  The &#x27;Network Name&#x27; or SSID, which is used as a shared secret to join the network, is transmitted in the clear.</description></item><item><title>CVE-2001-0618: Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the &#x27;Network Name&#x27; or SSID as the defau</title><link>https://patchthecve.com/cve/CVE-2001-0618.html</link><guid>https://patchthecve.com/cve/CVE-2001-0618.html</guid><pubDate>Tue, 16 Jun 2026 21:54:38 +0000</pubDate><description>HIGH 7.5: Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the &#x27;Network Name&#x27; or SSID as the default Wired Equivalent Privacy (WEP) encryption key.  Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic.</description></item><item><title>CVE-2001-0534: Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote </title><link>https://patchthecve.com/cve/CVE-2001-0534.html</link><guid>https://patchthecve.com/cve/CVE-2001-0534.html</guid><pubDate>Tue, 16 Jun 2026 21:54:28 +0000</pubDate><description>HIGH 10.0: Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.</description></item><item><title>CVE-2001-1082: Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbi</title><link>https://patchthecve.com/cve/CVE-2001-1082.html</link><guid>https://patchthecve.com/cve/CVE-2001-1082.html</guid><pubDate>Tue, 16 Jun 2026 21:55:33 +0000</pubDate><description>MEDIUM 5.0: Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.</description></item><item><title>CVE-2001-1081: Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers </title><link>https://patchthecve.com/cve/CVE-2001-1081.html</link><guid>https://patchthecve.com/cve/CVE-2001-1081.html</guid><pubDate>Tue, 16 Jun 2026 21:55:33 +0000</pubDate><description>HIGH 7.5: Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.</description></item><item><title>CVE-2001-0160: Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector (IV) values for the Wireless Encryptio</title><link>https://patchthecve.com/cve/CVE-2001-0160.html</link><guid>https://patchthecve.com/cve/CVE-2001-0160.html</guid><pubDate>Tue, 16 Jun 2026 21:53:46 +0000</pubDate><description>MEDIUM 5.0: Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector (IV) values for the Wireless Encryption Protocol (WEP) which allows remote attackers to quickly compile information that will let them decrypt messages.</description></item></channel></rss>