NVD

Id
4210  
Name
CVE-2008-4383  
Description
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-03  
Modified Date
2009-03-18  
Seq
2008-4383  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26767 4210 CVE-2008-4383 4347  View
26768 4210 CVE-2008-4383 http://www.layereddefense.com/alcatel12aug.html  View
26769 4210 CVE-2008-4383 20080812 Layered Defense Research Advisory: Alcatel-Lucent OmniSwitch products, Stack Buffer Overflow  View
26770 4210 CVE-2008-4383 30652  View
26771 4210 CVE-2008-4383 1020657  View
26772 4210 CVE-2008-4383 ADV-2008-2346  View
26773 4210 CVE-2008-4383 http://www1.alcatel-lucent.com/psirt/statements/2008002/OmniSwitch.htm  View
26774 4210 CVE-2008-4383 omniswitch-session-bo(44400)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48183 JVNDB-2008-003493 Alcatel OmniSwitch デバイスにおけるスタックベースのバッファオーバーフローの脆弱性 管理 Web サーバが組み込まれた OmniSwitch デバイスの Agranet-Emweb には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-4383 34496 CVE-2008-4383 4210 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003493.html 2008-08-06 2012-06-26 View