NVD

Id
1290  
Name
CVE-2008-1331  
Description
cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-04-02  
Modified Date
2011-03-07  
Seq
2008-1331  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8123 1290 CVE-2008-1331 5662  View
8124 1290 CVE-2008-1331 20080521 [DSECRG-08-020] Alcatel OmniPCX Office Remote Comand Execution  View
8125 1290 CVE-2008-1331 28758  View
8126 1290 CVE-2008-1331 1020082  View
8127 1290 CVE-2008-1331 ADV-2008-1057  View
8128 1290 CVE-2008-1331 http://www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htm  View
8129 1290 CVE-2008-1331 omnipcx-cgiscript-info-disclosure(41560)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47538 JVNDB-2008-002848 OmniPCX Office の cgi-data/FastJSData.cgi における "OXO リソースを取得される" 脆弱性 Internet Access サービスを含む OmniPCX Office の cgi-data/FastJSData.cgi には、任意のコマンドを実行され、"OXO リソースを取得される" 脆弱性が存在します。 CVE-2008-1331 31444 CVE-2008-1331 1290 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002848.html 2008-04-01 2012-06-26 View