ALE Alcatel-Lucent Omnivista 4760 and ALE Alcatel-Lucent Omnivista 8770 Remote Code Execution Vulnerabilities

The ALE Alcatel-Lucent Omnivista 4760 and the ALE Alcatel-Lucent Omnivista 8770 are both products of ALE France.The ALE Alcatel-Lucent Omnivista 4760 is a network management system. The product includes alarm notification, OmniPCX configuration, performance analysis and Voice over IP monitoring.A...

Alcatel OmniVista remote command execution

Added: 12/31/2019 Background Alcatel OmniVista is a graphical interface to Alcatel OmniPCX, a common VoIP solution. Problem Directory traversal and insecure upload vulnerabilities allow a remote attacker to upload and execute arbitrary PHP code. Resolution Upgrade to OmniVista 8770 version 4.1.12...

Alcatel OmniVista remote command execution

Added: 12/31/2019 Background Alcatel OmniVista is a graphical interface to Alcatel OmniPCX, a common VoIP solution. Problem Directory traversal and insecure upload vulnerabilities allow a remote attacker to upload and execute arbitrary PHP code. Resolution Upgrade to OmniVista 8770 version 4.1.12...

Alcatel OmniVista remote command execution

Added: 12/31/2019 Background Alcatel OmniVista is a graphical interface to Alcatel OmniPCX, a common VoIP solution. Problem Directory traversal and insecure upload vulnerabilities allow a remote attacker to upload and execute arbitrary PHP code. Resolution Upgrade to OmniVista 8770 version 4.1.12...

CVE-2019-20047

An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthenticated attacker to retrieve the content of its own session files. Every session file contains the administrative LDAP credentials encoded...

CVE-2019-20047

An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthenticated attacker to retrieve the content of its own session files. Every session file contains the administrative LDAP credentials encoded...

CVE-2019-20049

An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal which helps to bypass authentication with an insecure file upload to achieve Remote Code Execution as SYSTEM. The directory traversal is in the construct whereas the...

Directory traversal

An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal which helps to bypass authentication with an insecure file upload to achieve Remote Code Execution as SYSTEM. The directory traversal is in the construct whereas the...

Format string

An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthenticated attacker to retrieve the content of its own session files. Every session file contains the administrative LDAP credentials encoded...

CVE-2019-20047

The CVE-2019-20047 issue affects Alcatel-Lucent OmniVista 4760 and OmniVista 8770 prior to version 4.1.2. A misconfigured web server allows a remote unauthenticated attacker to retrieve the contents of its own session files located under /sessions/sess_. Each session file contains administrative ...

CVE-2019-20049

The CVE-2019-20049 entry affects Alcatel-Lucent OmniVista 4760 devices. A remote, unauthenticated attacker can chain a directory traversal vulnerability (located in the __construct() method) with an insecure file upload (in SetSkinImages()) to achieve Remote Code Execution as SYSTEM. This combine...

Directory traversal

Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable...

CVE-2011-0345

CVE-2011-0345 is a directory traversal vulnerability in the NMS server of Alcatel-Lucent OmniVista 4760 (affected: OmniVista 4760 NMS versions 5.0.07.05 and 5.1.06.03 ). The issue allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, specifically ...

KLA10056 RLF vulnerability in Alcatel-Lucent OmniVista 4760

A directory traversal vulnerability was found in OmniVista. By exploiting this vulnerability malicious users can read local files. This vulnerability can be exploited from the network at a point related to NMS server via specially designed GET request. Original advisories Alcatel bulletin Related...

DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability [ CVE-2011-0345 ]

Title: DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability CVE-2011-0345 Severity: High Date Discovered:10/29/2010 Discovered By: Digital Defense, Inc. Vulnerability Research Team Additional Discovered By: r@b13$ Vulnerability Description: The Alcatel-Lucent...

Alcatel-Lucent OmniVista 4760 Network Management System "lang"目录遍历漏洞

BUGTRAQ ID: 46624 CVE ID: CVE-2011-0345 Alcatel-Lucent OmniVista 4760 Network Management System可提供网络安全和优化的管理应用程序集。 Alcatel-Lucent OmniVista 4760 Network Management System在实现上存在目录遍历漏洞，攻击者可利用此漏洞使用目录遍历字符串从受影响系统中检索任意文件。 Alcatel Alcatel-Lucent OmniVista 4760 Network Management S 5.1.06.03 Alcatel...

CVE-2010-3281

Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.cPatch3 allows remote attackers to execute arbitrary code or cause a denial of service service crash via a long request...

Stack overflow

Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.cPatch3 allows remote attackers to execute arbitrary code or cause a denial of service service crash via a long request...

CVE-2010-3281

CVE-2010-3281 describes a stack-based buffer overflow in the HTTP proxy of the Alcatel-Lucent OmniVista 4760 server. The vulnerability is triggered by a long HTTP GET request to the built-in proxy, allowing remote attackers to potentially execute arbitrary code or cause a denial of service. Affec...

KLA10055 ACE & DoS vulnerability in OmniVista 4760

A buffer overflow vulnerability was found in OmniVista. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited from the network via a specially designed request. Original advisories Alcatel bulletin Related...