CVE-2008-4383
Critical
Description
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie.
SeverityCritical
CVSS10.0
Exploit probability—
ProductAlcatel Aos
PublishedOct 3, 2008
First seenOct 3, 2008
How to fix
Update
- alcatel aos5.1.6.463.r02, 5.4.1.429.r01, 6.1.3.965.r01, 6.1.5.595.r01, 6.3.1.966.r01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alcatel aos | 5.1 ≤ v < 5.1.6.463.r02, 5.4 ≤ v < 5.4.1.429.r01, 6.1.3 ≤ v < 6.1.3.965.r01, 6.1.5 ≤ v < 6.1.5.595.r01, 6.3 ≤ v < 6.3.1.966.r01 | 5.1.6.463.r02, 5.4.1.429.r01, 6.1.3.965.r01, 6.1.5.595.r01, 6.3.1.966.r01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.