PT-2011-2283 · Alcatel Lucent · Alcatel-Lucent Omnipcx Enterprise

Published 2011-03-08 · Updated 2017-08-17 · CVE-2011-0344

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent OmniPCX Enterprise versions prior to R9.0 H1.301.50

Description The issue is related to multiple stack-based buffer overflows in unspecified CGI programs within the Unified Maintenance Tool web interface of the embedded web server in the Communication Server. This allows remote attackers to execute arbitrary code via crafted HTTP headers.

Recommendations For versions prior to R9.0 H1.301.50, update to R9.0 H1.301.50 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-0344

Affected Products

Alcatel-Lucent Omnipcx Enterprise

References · 7

• http://alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011001.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0344 · Security Note
• http://secunia.com/advisories/43588 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0549 · Vendor Advisory
• http://securityfocus.com/bid/46640 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65849 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=896 · Note