Stack overflow

Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.cPatch3 allows remote attackers to execute arbitrary code or cause a denial of service service crash via a long request...

Default configuration

The default configuration of the CCAgent option before 9.0.8.4 in the management server aka TSA component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving...

Authorization

The CCAgent option 9.0.8.4 and earlier in the management server aka TSA component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which...

CVE-2010-3281

Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.cPatch3 allows remote attackers to execute arbitrary code or cause a denial of service service crash via a long request...

CVE-2010-3281

CVE-2010-3281 describes a stack-based buffer overflow in the HTTP proxy of the Alcatel-Lucent OmniVista 4760 server. The vulnerability is triggered by a long HTTP GET request to the built-in proxy, allowing remote attackers to potentially execute arbitrary code or cause a denial of service. Affec...

CVE-2010-3279

The default configuration of the CCAgent option before 9.0.8.4 in the management server aka TSA component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving...

CVE-2010-3280

The CVE-2010-3280 issue affects Alcatel-Lucent OmniTouch Contact Center Standard Edition, specifically the CCAgent option in the TSA/management server. The root cause is client-side authorization checking that results in the SuperUser password being sent to the client, enabling an attacker with a...

CVE-2010-3279

Affected product: Alcatel-Lucent OmniTouch Contact Center Standard Edition, CCAgent option (TSA management server). Root cause: default configuration and flawed authentication allow unauthenticated access to TSA_maintenance.exe, enabling remote monitoring or reconfiguration of Contact Center oper...

CVE-2010-3280

The CCAgent option 9.0.8.4 and earlier in the management server aka TSA component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which...

CVE-2010-3280: Exposure of Sensitive Information to an Unauthorized Actor

The CCAgent option 9.0.8.4 and earlier in the management server aka TSA component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which...

CVE-2010-3281: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.cPatch3 allows remote attackers to execute arbitrary code or cause a denial of service service crash via a long request...

KLA10055 ACE & DoS vulnerability in OmniVista 4760

A buffer overflow vulnerability was found in OmniVista. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited from the network via a specially designed request. Original advisories Alcatel bulletin Exploitation...

CVE-2010-3279: Undefined Security Weakness

The default configuration of the CCAgent option before 9.0.8.4 in the management server aka TSA component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving...

n.runs-SA-2010.002 - Alcatel-Lucent - arbitrary code execution on OmniVista 4760

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.002 20-September-2010 Vendor: Alcatel Affected Products: OmniVista 4760 server: all versions prior to release R5.1.06.03.cPatch3. Vulnerability: arbitrary code execution Risk: High CVE-Number: CVE-2010-3281 Vendor communication:...

n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated administrative access to CTI CCA Server

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.001 20-September-2010 Vendor: Alcatel Affected Products: Versions before 9.0.8.4 of the CCAgent option of OmniTouch Contact Center Standard Edition Vulnerability: unauthenticated administrative access to CTI CCA Server Risk: High...

BIND 9 DNSSEC validation code could cause fake NXDOMAIN responses

Overview A vulnerability exists in the BIND 9 DNSSEC validation code that could be used by an attacker to generate fake NXDOMAIN responses. Description BIND 9 contains a vulnerability in DNSSEC validation code. According to ISC: There was an error in the DNSSEC NSEC/NSEC3 validation code that cou...

Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Alcatel-Luce...

ProSysInfo TFTP Server TFTPDWIN 0.4.2 Overflow

!/usr/bin/perl ProSysInfo TFTP server TFTPDWIN Greets fly to InTeL. WARNING: Author has no responsibility over the damage you do using this! use IO::Socket; use warnings; use strict; if!$ARGV0 print "x ProSysInfo TFTP server TFTPDWIN = 0.4.2\n"; print " Universal Remote Buffer Overflow Exploi...

ProSysInfo TFTP server TFTPDWIN 0.4.2 - Universal Remote Buffer Overflow

ProSysInfo TFTP server TFTPDWIN 0.4.2 - Universal Remote Buffer Overflow !/usr/bin/perl ProSysInfo TFTP server TFTPDWIN Greets fly to InTeL. WARNING: Author has no responsibility over the damage you do using this! use IO::Socket; use warnings; use strict; if!$ARGV0 print "x ProSysInfo TFTP server...

ProSysInfo TFTP server TFTPDWIN 0.4.2 - Universal Remote Buffer Overflow

!/usr/bin/perl ProSysInfo TFTP server TFTPDWIN Greets fly to InTeL. WARNING: Author has no responsibility over the damage you do using this! use IO::Socket; use warnings; use strict; if!$ARGV0 print "x ProSysInfo TFTP server TFTPDWIN = 0.4.2\n"; print " Universal Remote Buffer Overflow...