CVE-2002-0209: Nortel Alteon Acedirector

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address.

Affected products

• Nortel Alteon Acedirector: version 9.0 only

Published 2002-05-16. Last modified 2026-06-16.