NetSight
IP …
critical10.0

CVE-2008-4383

Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices…

Impact

Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie.

Affected products

VendorProductAffected versions
AlcatelAos
from 5.1 before 5.1.6.463.r02
from 5.4 before 5.4.1.429.r01
from 6.1.3 before 6.1.3.965.r01
from 6.1.5 before 6.1.5.595.r01
from 6.3 before 6.3.1.966.r01

Weakness classification

CWE-119

References