Unscored severity · published Oct 3, 2008
CVE-2008-4383
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before…
–
CVSS
8.2%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.2% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AO
Aos · Alcatel
5.1 before 5.1.6.463.r02; 5.4 before 5.4.1.429.r01; 6.1.3 before 6.1.3.965.r01; 6.1.5 before 6.1.5.595.r01; 6.3 before 6.3.1.966.r01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4383
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4383
Third Party Advisory
http://secunia.com/advisories/31435
Third Party Advisory
http://securityreason.com/securityalert/4347
Broken Link
http://www.layereddefense.com/alcatel12aug.html
Third Party Advisory
http://www.securityfocus.com/archive/1/495343/100/0/threaded
Third Party Advisory
http://www.securityfocus.com/bid/30652
Third Party Advisory
http://www.securitytracker.com/id?1020657
More from Aos
–
CVE-2002-1272
Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows…