PT-2011-2283 · Alcatel Lucent · Alcatel-Lucent Omnipcx Enterprise

Publicado 2011-03-08 · Atualizado 2017-08-17 · CVE-2011-0344

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:A/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent OmniPCX Enterprise versions prior to R9.0 H1.301.50

Description The issue is related to multiple stack-based buffer overflows in unspecified CGI programs within the Unified Maintenance Tool web interface of the embedded web server in the Communication Server. This allows remote attackers to execute arbitrary code via crafted HTTP headers.

Recommendations For versions prior to R9.0 H1.301.50, update to R9.0 H1.301.50 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-0344

Produtos afetados

Alcatel-Lucent Omnipcx Enterprise

Referências · 7

• http://securityfocus.com/bid/46640 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65849 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=896 · Nota
• http://alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011001.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0344 · Nota de Segurança
• http://secunia.com/advisories/43588 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0549 · Aviso do Fabricante