CVE-2008-4383

EPSS 8.21%
Veröffentlicht 03.10.2008 22:22:41
Zuletzt bearbeitet 16.06.2026 22:57:42
Erkennungen
Login

Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 12

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Alcatel ≫ Aos Version >= 5.1 < 5.1.6.463.r02

   Alcatel-lucent ≫ Omniswitch Version os6600
   Alcatel-lucent ≫ Omniswitch Version os6800
   Alcatel-lucent ≫ Omniswitch Version os6850
   Alcatel-lucent ≫ Omniswitch Version os7000
   Alcatel-lucent ≫ Omniswitch Version os9000

Alcatel ≫ Aos Version >= 5.4 < 5.4.1.429.r01

Alcatel ≫ Aos Version >= 6.1.3 < 6.1.3.965.r01

Alcatel ≫ Aos Version >= 6.1.5 < 6.1.5.595.r01

Alcatel ≫ Aos Version >= 6.3 < 6.3.1.966.r01

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	8.21%	0.942

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/31435

Third Party Advisory

http://securityreason.com/securityalert/4347

Third Party Advisory

http://www.layereddefense.com/alcatel12aug.html

Broken Link

http://www.securityfocus.com/archive/1/495343/100/0/threaded

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/30652

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id?1020657

Third Party Advisory

VDB Entry

http://www.vupen.com/english/advisories/2008/2346

Third Party Advisory

http://www1.alcatel-lucent.com/psirt/statements/2008002/OmniSwitch.htm

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/44400

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2008-4383

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-4383

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4383

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-4383