PT-2010-4705 · Alcatel Lucent · Alcatel-Lucent Omnitouch Contact Center Standard Edition

Published 2010-09-23 · Updated 2017-08-17 · CVE-2010-3279

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:A/AC:M/Au:N/C:C/I:P/A:C

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent OmniTouch Contact Center Standard Edition versions prior to 9.0.8.4

Description The default configuration of the CCAgent option in the management server component enables maintenance access, allowing remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA maintenance.exe.

Recommendations For versions prior to 9.0.8.4, update to version 9.0.8.4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2010-3279

Affected Products

Alcatel-Lucent Omnitouch Contact Center Standard Edition

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2010-3279 · Security Note
• http://secunia.com/advisories/41509 · Vendor Advisory
• http://vupen.com/english/advisories/2010/2459 · Vendor Advisory
• http://alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2010001.pdf · Vendor Advisory
• http://nruns.com/_downloads/nruns-SA-2010-001.pdf · Note
• http://securityfocus.com/bid/43340 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61921 · Note
• http://securityfocus.com/archive/1/513869 · Note