CVE-2008-4383

Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/31435	Third Party Advisory
http://securityreason.com/securityalert/4347	Third Party Advisory
http://www.layereddefense.com/alcatel12aug.html	Broken Link
http://www.securityfocus.com/archive/1/495343/100/0/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/30652	Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1020657	Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/2346	Third Party Advisory
http://www1.alcatel-lucent.com/psirt/statements/2008002/OmniSwitch.htm	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44400	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:alcatel:aos::::::::
	cpe:2.3:o:alcatel:aos::::::::
	cpe:2.3:o:alcatel:aos::::::::
	cpe:2.3:o:alcatel:aos::::::::
	cpe:2.3:o:alcatel:aos::::::::

OR	cpe:2.3:h:alcatel-lucent:omniswitch:os6600:::::::*
	cpe:2.3:h:alcatel-lucent:omniswitch:os6800:::::::*
	cpe:2.3:h:alcatel-lucent:omniswitch:os6850:::::::*
	cpe:2.3:h:alcatel-lucent:omniswitch:os7000:::::::*
	cpe:2.3:h:alcatel-lucent:omniswitch:os9000:::::::*

History

No history.

Information

Published : 2008-10-03 22:22

Updated : 2023-12-10 10:51

NVD link : CVE-2008-4383

Mitre link : CVE-2008-4383

CVE.ORG link : CVE-2008-4383

JSON object : View

Products Affected

alcatel-lucent

omniswitch

alcatel

aos

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2008-4383", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-10-03T22:22:41.057", "references": [{"url": "http://secunia.com/advisories/31435", "tags": ["Third Party Advisory"], "source": "cret@cert.org"}, {"url": "http://securityreason.com/securityalert/4347", "tags": ["Third Party Advisory"], "source": "cret@cert.org"}, {"url": "http://www.layereddefense.com/alcatel12aug.html", "tags": ["Broken Link"], "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/archive/1/495343/100/0/threaded", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/30652", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cret@cert.org"}, {"url": "http://www.securitytracker.com/id?1020657", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cret@cert.org"}, {"url": "http://www.vupen.com/english/advisories/2008/2346", "tags": ["Third Party Advisory"], "source": "cret@cert.org"}, {"url": "http://www1.alcatel-lucent.com/psirt/statements/2008002/OmniSwitch.htm", "tags": ["Vendor Advisory"], "source": "cret@cert.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44400", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cret@cert.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en el servidor web de gesti\u00f3n embebido Agranet-Emweb de Alcatel OmniSwitch dispositivos OS7000, OS6600, OS6800, OS6850, y OS9000 Series con AoS 5.1 versiones anteriores a v5.1.6.463.R02, 5.4 versiones anteriores a v5.4.1.429.R01, 6.1.3 versiones anteriores a v6.1.3.965.R01, 6.1.5 versiones anteriores a v6.1.5.595.R01, y 6.3 versiones anteriores a v6.3.1.966.R01 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de una cookie Session."}], "lastModified": "2018-11-02T13:07:01.850", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:alcatel:aos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6A279F1-071D-4863-9B8A-203DC16F93B2", "versionEndExcluding": "5.1.6.463.r02", "versionStartIncluding": "5.1"}, {"criteria": "cpe:2.3:o:alcatel:aos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F42552F9-66F9-4BAE-B9D1-A26493BFC03B", "versionEndExcluding": "5.4.1.429.r01", "versionStartIncluding": "5.4"}, {"criteria": "cpe:2.3:o:alcatel:aos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD33FE30-180C-4595-A132-FAFD6DF3ACB3", "versionEndExcluding": "6.1.3.965.r01", "versionStartIncluding": "6.1.3"}, {"criteria": "cpe:2.3:o:alcatel:aos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48CD9501-9110-4BDB-8BB8-E1E109A0E902", "versionEndExcluding": "6.1.5.595.r01", "versionStartIncluding": "6.1.5"}, {"criteria": "cpe:2.3:o:alcatel:aos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B8892FF-96F1-4249-A9E2-DCCB0B251CA6", "versionEndExcluding": "6.3.1.966.r01", "versionStartIncluding": "6.3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:alcatel-lucent:omniswitch:os6600:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "18275D45-CBFB-4F72-AED3-50CF6B26A58D"}, {"criteria": "cpe:2.3:h:alcatel-lucent:omniswitch:os6800:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9EABF0C1-2359-445F-B5E2-72E754F72C9D"}, {"criteria": "cpe:2.3:h:alcatel-lucent:omniswitch:os6850:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3EAD34DA-3CB4-4E7E-B486-07E9F2796AC3"}, {"criteria": "cpe:2.3:h:alcatel-lucent:omniswitch:os7000:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A3768D0F-92EC-4F4B-AD24-11B0459903AF"}, {"criteria": "cpe:2.3:h:alcatel-lucent:omniswitch:os9000:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FE7A3488-15B6-4EB3-B478-5EF005997EB2"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cret@cert.org"}