Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Nokia IP440 web admin may crash or run commands

CVE-2001-0299 · published 25 years ago
Summary

The web administration interface on the Nokia IP440 firewall can be overloaded with a very long URL, causing the system to stop working and, in some cases, allowing a local user to run commands. This could interrupt network protection and expose the device to further misuse. Apply the latest firmware update from Nokia and restrict access to the admin interface to trusted users only.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
nokia ip440_firewall_vpn_appliance 1.0
cpe:2.3:h:nokia:ip440_firewall_vpn_appliance:1.0:*:*:*:*:*:*:*
Original advisory text
Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, and possibly execute arbitrary commands, via a long URL.
Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, and possibly execute arbitrary commands, via a long URL.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Timeline
Published2 Jun 2001
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2001-0299 · NVD
Track software like this
Free during beta