Unscored severity · published Mar 8, 2011
CVE-2011-0345
Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OM
Omnivista · Alcatel-lucent
through 4760_r5.1.06.03; 4760_r5.0.07.05 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0345
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0345
seclists.org
http://seclists.org/fulldisclosure/2011/Mar/8
Vendor Advisory
http://secunia.com/advisories/43507
securityreason.com
http://securityreason.com/securityalert/8122
Vendor Advisory
http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011002.pdf
www.securityfocus.com
http://www.securityfocus.com/archive/1/516768/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/46624
More from Omnivista
–
CVE-2007-5190
Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action…