CVE-2011-0345

Alcatel-Lucent OmniVista < 4760_r5.1.06.03 - Path Traversal via Lang Variable

Title source: llm

Description

Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.

References (8)

Core 8

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/43507

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/8122

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/516768/100/0/threaded

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0548

Mailing List mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2011/Mar/8

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/46624

Vendor Advisory x_refsource_confirm

http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011002.pdf

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/65848

Scores

EPSS 0.0094

EPSS Percentile 56.6%

Details

CWE

CWE-22

Status published

Products (2)

alcatel-lucent/omnivista 4760_r5.0.07.05

alcatel-lucent/omnivista < 4760_r5.1.06.03

Published Mar 08, 2011

Tracked Since Feb 18, 2026