CVE-2008-1331

严重 10.0CVE-2008-1331 · Published 02/04/2008 · updated 16/06/2026

要点

CVE-2008-1331 是影响 omnipcx office (alcatel-lucent) 的严重 (CVSS 10.0)漏洞。
未来 30 天内被利用的概率（EPSS）：8.8%，高于 95.2% 的漏洞。
修复：升级到 210\/091.001, 610\/014.001 或更高版本。

Package	Affected versions	Patched versions
omnipcx office alcatel-lucent	`≥ 210, < 210\/091.001≥ 610, < 610\/014.001`	`210\/091.001610\/014.001`

Description

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.

References

secunia.com/advisories/29798 · Third Party Advisory
securityfocus.com/archive/1/492383/100/0/threaded · Third Party Advisory
securityfocus.com/bid/28758 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
vupen.com/english/advisories/2008/1057 · Permissions Required
www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htm · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/41560 · Third Party Advisory
exploit-db.com/exploits/5662 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free