ID de Prueba:	1.3.6.1.4.1.25623.1.0.103480
Categoría:	Web application abuses
Título:	Alcatel-Lucent OmniPCX Enterprise RCE Vulnerability
Resumen:	Alcatel-Lucent OmniPCX Enterprise is prone to a remote command-;execution vulnerability because it fails to adequately sanitize user-;supplied data.
Descripción:	Summary: Alcatel-Lucent OmniPCX Enterprise is prone to a remote command- execution vulnerability because it fails to adequately sanitize user- supplied data. Vulnerability Impact: Attackers can exploit this issue to execute arbitrary commands with the privileges of the 'httpd' user. Successful attacks may facilitate a compromise of the application and underlying webserver, other attacks are also possible. Affected Software/OS: Alcatel-Lucent OmniPCX Enterprise R7.1 and prior versions are vulnerable to this issue. Solution: The vendor has released an advisory along with fixes to address this issue. Please see the referenced advisory for information on obtaining fixes. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3010 BugTraq ID: 25694 http://www.securityfocus.com/bid/25694 Bugtraq: 20070917 Alcatel-Lucent OmniPCX Remote Command Execution (Google Search) http://www.securityfocus.com/archive/1/479699/100/0/threaded http://marc.info/?l=full-disclosure&m=119002152126755&w=2 http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php http://osvdb.org/40521 http://secunia.com/advisories/26853 http://www.vupen.com/english/advisories/2007/3185 XForce ISS Database: alcatel-unified-mastercgi-command-execution(36632) https://exchange.xforce.ibmcloud.com/vulnerabilities/36632
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.