CVE-2010-3281

MEDIUM 5.4CVE-2010-3281 · Published 23/09/2010 · updated 16/06/2026

In short

CVE-2010-3281 is a MEDIUM (CVSS 5.4) vulnerability affecting omnivista 4760 server (alcatel-lucent).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
omnivista 4760 server alcatel-lucent	`= 4.1.13.00= 5.0= 5.1= 5.1.06.03.c≤ 5.1.06.03.c`	No fix yet

Description

Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.c_Patch3 allows remote attackers to execute arbitrary code or cause a denial of service (service crash) via a long request.

References

secunia.com/advisories/41508 · Vendor Advisory
alcatel-lucent.com/wps/DocumentStreamerServlet · Vendor Advisory
nruns.com/_downloads/nruns-SA-2010-002.pdf
securityfocus.com/archive/1/513865
securityfocus.com/archive/1/513866
securityfocus.com/bid/43338
vupen.com/english/advisories/2010/2460 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/61922

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free