CVE-2003-1108

CVE-2003-1108 affects the SIP implementation in Alcatel OmniPCX Enterprise 5.0 Lx. The issue allows remote attackers to cause a denial of service and potentially execute arbitrary code by sending crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite. Connected sources co...

CVE-2011-0344

CVE-2011-0344 concerns multiple stack-based buffer overflows in unspecified CGI programs within the OmniPCX Enterprise CS web interface. The vulnerability arises when parsing certain HTTP headers, enabling a remote attacker to execute arbitrary code with the service’s privileges. Affected: OmniPC...

CVE-2007-5361

The CVE-2007-5361 issue affects Alcatel-Lucent OmniPCX Enterprise (7.1 and earlier). The Communication Server caches a phone IP during a TFTP request from an IP Touch device and then uses that IP as the destination for all subsequent VoIP packets to that phone. This enables remote attackers to ca...

CVE-2002-0293

The CVE-2002-0293 entry describes a Local Privilege Escalation in the Alcatel OmniPCX 4400 FTP service: the halt user can gain root privileges by modifying root's .profile. This yields full confidentiality, integrity, and availability impact as stated. The connected documents do not provide speci...

CVE-2002-1691

CVE-2002-1691 affects the Alcatel OmniPCX 4400. The vulnerability arises because known user accounts and passwords are installed in the /etc/password file by default, enabling remote attackers to gain unauthorized access. The available sources corroborate the default-credentials issue and the res...

CVE-2002-0295

CVE-2002-0295 affects Alcatel OmniPCX 4400; the flaw is that setup installs files with world-writable permissions, enabling local users to reconfigure the system and potentially obtain privileges. Documented impact is local, with partial confidentiality/integrity/availability. No explicit exploit...

CVE-2007-2512

CVE-2007-2512 affects Alcatel-Lucent OmniPCX Enterprise Release 7.0 and later, where the built‑in mini switch on IP-Touch phones is enabled by default. This allows unauthenticated access to the voice VLAN through a daisy‑chained computer system, effectively bypassing 802.1x in some scenarios and ...

CVE-2002-0294

The CVE-2002-0294 entry concerns Alcatel 4400. The affected component is the /chetc/shutdown command which is installed with setgid privileges. The underlying issue is privilege escalation by assigning setgid to a program used for system shutdown, enabling local users to shut down the system (imp...