10

CVE-2008-1331

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Alcatel-lucent ≫ Omnipcx Office Version >= 210 < 210\/091.001
Alcatel-lucent ≫ Omnipcx Office Version >= 610 < 610\/014.001
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.78% 0.945
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/29798
Third Party Advisory
http://www.securityfocus.com/archive/1/492383/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/28758
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1020082
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/1057
Permissions Required
http://www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htm
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41560
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/5662
Third Party Advisory
VDB Entry