CVE-2008-4383

Alcatel OmniSwitch AOS 5.1-5.1.6.463.r02 - Remote Code Execution via Long Session Cookie

Title source: llm

Description

Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie.

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/30652

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020657

Broken Link x_refsource_misc

http://www.layereddefense.com/alcatel12aug.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/44400

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/4347

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31435

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/495343/100/0/threaded

Vendor Advisory x_refsource_confirm

http://www1.alcatel-lucent.com/psirt/statements/2008002/OmniSwitch.htm

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2346

Scores

EPSS 0.0821

EPSS Percentile 94.2%

Details

CWE

CWE-119

Status published

Products (1)

alcatel/aos 5.1 - 5.1.6.463.r02

Published Oct 03, 2008

Tracked Since Feb 18, 2026