CVE:CVE-2002-0236
CNNVD:CNNVD-200205-076
VitalNet是Lucent的VitalSuite SP组件中的一员。VitalNet允许用户监视、分析、管理及预测他们网络架构的性能。
VitalNet的口令验证机制存在问题，远程攻击者可以绕过验证进行访问。
VitalNet基于cookie的认证存在漏洞，攻击者只要猜到一个有效用户名就可以无需知道口令实现对服务器的访问。
solution:Upgrade lucent vitalanalysis to a higher version than 8.0,8.1,8.2,and avoid the version 8.0,8.1,8.2; Upgrade lucent vitalevent to a higher version than 8.0,8.1,8.2,and avoid the version 8.0,8.1,8.2; Upgrade lucent vitalhelp to a higher version than 8.0,8.1,8.2,and avoid the version 8.0,8.1,8.2; Upgrade lucent vitalnet to a higher version than 8.0,8.1,8.2,and avoid the version 8.0,8.1,8.2; Upgrade lucent vitalsuite to a higher version than 8.0,8.1,8.2,and avoid the version 8.0,8.1,8.2