CVE-2007-3010

Опубликовано: 18 сент. 2007

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Критический

Описание

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

Ссылки

http://marc.info/?l=full-disclosure&m=119002152126755&w=2
Exploit
Mailing List
http://osvdb.org/40521
Broken Link
http://secunia.com/advisories/26853
Broken Link
Vendor Advisory
http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php
Broken Link
http://www.securityfocus.com/archive/1/479699/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/25694
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/3185
Broken Link
http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/36632
Third Party Advisory
VDB Entry
http://marc.info/?l=full-disclosure&m=119002152126755&w=2
Exploit
Mailing List
http://osvdb.org/40521
Broken Link
http://secunia.com/advisories/26853
Broken Link
Vendor Advisory
http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php
Broken Link
http://www.securityfocus.com/archive/1/479699/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/25694
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/3185
Broken Link
http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/36632
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:al-enterprise:omnipcx_enterprise_communication_server:*:*:*:*:*:*:*:*

Версия до 7.1 (включая)

EPSS

Процентиль: 100%

0.94007

Критический

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

CWE-77

Связанные уязвимости

GHSA-27fx-q398-q8vr