OmniPCX Office远程信息泄露漏洞

BUGTRAQ ID: 28758 CVECAN ID: CVE-2008-1331 阿尔卡特的OmniPCX Office是一套为中小型企业设计的统一通信解决方案。 OmniPCX Office的Internet Access服务所使用的一个CGI脚本没有正确地过滤某些特定参数，允许远程攻击者从Internet检索敏感信息。 Alcatel-Lucent OmniPCX Office = 210/061.1 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 禁止从Internet的WBM/WCA访问 对于R2.1到R4.1版本：...

OmniPCX Enterprise音频重新路由信息泄漏及拒绝服务漏洞

BUGTRAQ ID: 26494 CVECAN ID: CVE-2007-5361 OmniPCX Enterprise是企业级的集成通讯解决方案。 OmniPCX Enterprise在处理畸形TFTP请求时存在漏洞，远程攻击者可能利用此漏洞导致设备工作不正常。 在引导时，OmniPCX Enterprise服务器的IP...

Design/Logic Flaw

The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch phone, and uses this IP address as the destination for all subsequent VoIP packets to this phone, which allows remote attackers to cause a denial of service lo...

CVE-2007-5361

The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch phone, and uses this IP address as the destination for all subsequent VoIP packets to this phone, which allows remote attackers to cause a denial of service lo...

CVE-2007-5361

The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch phone, and uses this IP address as the destination for all subsequent VoIP packets to this phone, which allows remote attackers to cause a denial of service lo...

CVE-2007-5361

The CVE-2007-5361 issue affects Alcatel-Lucent OmniPCX Enterprise (7.1 and earlier). The Communication Server caches a phone IP during a TFTP request from an IP Touch device and then uses that IP as the destination for all subsequent VoIP packets to that phone. This enables remote attackers to ca...

Alcatel OmniPCX audio stream hijack

It's possible to hijack audio strem from server by sending TFTP request with filename containing victim's IP...

Alcatel OmniPCX Enterprise VoIP Vulnerability

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: OmniPCX Enterprise Vendor: Alcatel Subject: VoIP Phone Audio Stream Rerouting Vulnerability Risk High Effect Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: November, 19th 2007 Introduction: ------------...

OmniPCX Enterprise音频重路由信息泄露和拒绝服务漏洞

OmniPCX Enterprise是一款功能强大的语音通信系统。 OmniPCX Enterprise处理特定的TFTP请求存在问题，远程攻击者可以利用漏洞重路由音频流而使信息泄露或进行拒绝服务攻击。 在启动过程中，IP Touch电话使用TFTP协议下载配置信息。 通过发送包含电话的MAC地址Ethernet地址TFTP请求伪造这个初始化下载请求，通信服务器会认为攻击者PC的IP地址是为电话集的正常IP地址而重定向音频信息。 由于信号连接没有断开，因此电话仍旧维持原状，可拨号和接收呼叫。攻击者可利用这问题引导音频到攻击者控制端。导致信息泄露或拒绝服务攻击。 Alcatel OmniP...

CVE-2007-5190

Multiple cross-site scripting XSS vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the action parameter to php-bin/Webclient.php or 2 the Langue parameter to the default URI...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the action parameter to php-bin/Webclient.php or 2 the Langue parameter to the default URI...

CVE-2007-5190

Multiple cross-site scripting XSS vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the action parameter to php-bin/Webclient.php or 2 the Langue parameter to the default URI...

CVE-2007-5190

CVE-2007-5190: Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter to php-bin/Webclient.php or (2) the Langue parameter to the default URI. Affected product: Alcat...

S21SEC-038-en: Alcatel Omnivista 4760 Cross-Site Scripting

S21Sec Advisory - Title: Alcatel Omnivista 4760 Cross-Site Scripting ID: S21SEC-038-en Severity: Medium - History: 10.Jun.2007 Vulnerability discovered 20.Jun.2007 Vendor contacted 19.Oct.2007 Advisory released Authors: Juan de la Fuente Costa [email protected] Pablo Seijo Cajaraville...

Alcatel Lucent Omnivista 4760 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26128/info OmniVista 4760 is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities may allow an attacker to perform cross-site scripting attacks ...

Alcatel Lucent Omnivista 4760 - Multiple Cross-Site Scripting Vulnerabilities

Alcatel Lucent Omnivista 4760 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26128/info OmniVista 4760 is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these...

S21SEC-038-en.txt

S21Sec Advisory - Title: Alcatel Omnivista 4760 Cross-Site Scripting ID: S21SEC-038-en Severity: Medium - History: 10.Jun.2007 Vulnerability discovered 20.Jun.2007 Vendor contacted 19.Oct.2007 Advisory released Authors: Juan de la Fuente Costa [email protected] Pablo Seijo Cajaraville...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistanc...

Authentication flaw

The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass authentication and gain administrative access via vectors including a '/' slash character at the end of the PATHINFO to cgi/b, aka "double-slash auth bypass....

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...