NVD

Id
22451  
Name
CVE-2016-9796  
Description
Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods (AddJobSet, AddJob, and ExecuteNow) that can be used to run arbitrary commands on the server, with the privilege of NT AUTHORITYSYSTEM on the server. NOTE: The discoverer states "The vendor position is to refer to the technical guidelines of the product security deployment to mitigate this issue, which means applying proper firewall rules to prevent unauthorised clients to connect to the OmniVista server."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-12-03  
Modified Date
2016-12-07  
Seq
2016-9796  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119154 22451 CVE-2016-9796 http://blog.malerisch.net/2016/12/alcatel-omnivista-8770-unauth-rce-giop-corba.html  View
119155 22451 CVE-2016-9796 94649  View
119156 22451 CVE-2016-9796 https://github.com/malerisch/omnivista-8770-unauth-rce  View
119157 22451 CVE-2016-9796 https://www.youtube.com/watch?v=aq37lQKa9sk  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5344 JVNDB-2016-006117 Alcatel-Lucent OmniVista 8770 における任意のコマンドを実行される脆弱性 Alcatel-Lucent OmniVista 8770 は、複数の異なる ORB インターフェースを露出し、認証を回避されるため、任意のコマンドを実行される脆弱性が存在します。 CVE-2016-9796 96303 CVE-2016-9796 22451 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006117.html 2016-12-01 2016-12-07 View