Alcatel-lucent : Security Vulnerabilities, CVEs, Published In 2010
Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.c_Patch3 allows remote attackers to execute arbitrary code or cause a denial of service (service crash) via a long request.
Max CVSS
5.4
EPSS Score
6.99%
Published
2010-09-23
Updated
2017-08-17
The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which allows remote attackers to monitor or reconfigure Contact Center operations via a modified client application.
Max CVSS
6.9
EPSS Score
1.31%
Published
2010-09-23
Updated
2017-08-17
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA_maintenance.exe.
Max CVSS
7.6
EPSS Score
1.80%
Published
2010-09-23
Updated
2017-08-17
3 vulnerabilities found