CVE-2007-3010

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

Omnipcx Enterprise Communication Server

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

18. Sep 2007

Ausgewertete Quellen

• Hersteller
  http://secunia.com/advisories/26853
• Hinweis
  http://www.securityfocus.com/archive/1/479699/100/0/threaded
• Hinweis
  http://www.securityfocus.com/bid/25694
• Hinweis
  https://exchange.xforce.ibmcloud.com/vulnerabilities/36632
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-3010
• CISA
  Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability
• NVD
  CVE-2007-3010