CVE-2011-0345

BAJO 3.3CVE-2011-0345 · Published 08/03/2011 · updated 16/06/2026

En resumen

CVE-2011-0345 es una vulnerabilidad BAJO (CVSS 3.3) que afecta a omnivista (alcatel-lucent).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.94%, mayor que el 61.0% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
omnivista alcatel-lucent	`= 4760_r5.0.07.05≤ 4760_r5.1.06.03`	No fix yet

Description

Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.

References

seclists.org/fulldisclosure/2011/Mar/8
secunia.com/advisories/43507 · Vendor Advisory
securityreason.com/securityalert/8122
alcatel-lucent.com/wps/DocumentStreamerServlet · Vendor Advisory
securityfocus.com/archive/1/516768/100/0/threaded
securityfocus.com/bid/46624
vupen.com/english/advisories/2011/0548 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/65848

Más vulnerabilidades de omnivista

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free