CVE-2011-0344
Last modified
CVE-2011-0344 is a vulnerability of currently unknown severity. Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server in the Communication Server (CS) in Alcatel-Lucent OmniPCX Enterprise before R9.0 H1.301.50 allow remote attackers to execute arbitrary code via crafted HTTP headers.. EPSS estimates a 2.32% chance of exploitation in the next 30 days.
Description
Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server in the Communication Server (CS) in Alcatel-Lucent OmniPCX Enterprise before R9.0 H1.301.50 allow remote attackers to execute arbitrary code via crafted HTTP headers.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Alcatel-Lucent | Omnipcx | <= 9.0 |
| Alcatel-Lucent | Omnipcx | 5.0 |
| Alcatel-Lucent | Omnipcx | 6.2 |
| Alcatel-Lucent | Omnipcx | 7.0 |
| Alcatel-Lucent | Omnipcx | 7.1 |
| Alcatel-Lucent | Omnipcx | 8.0 |
References
- http://secunia.com/advisories/43588Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0549Vendor Advisory
- http://secunia.com/advisories/43588Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0549Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-0344?
How severe is CVE-2011-0344?
How do I fix CVE-2011-0344?
Are you affected by CVE-2011-0344?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
