CVE-2011-0345

Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.

CVSS v2.0 3.3 LOW

3.3^/10

CVSS v2.0 : LOW

Vector : AV:A/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 6.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://seclists.org/fulldisclosure/2011/Mar/8
http://secunia.com/advisories/43507	Vendor Advisory
http://securityreason.com/securityalert/8122
http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011002.pdf	Vendor Advisory
http://www.securityfocus.com/archive/1/516768/100/0/threaded
http://www.securityfocus.com/bid/46624
http://www.vupen.com/english/advisories/2011/0548	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65848
http://seclists.org/fulldisclosure/2011/Mar/8
http://secunia.com/advisories/43507	Vendor Advisory
http://securityreason.com/securityalert/8122
http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011002.pdf	Vendor Advisory
http://www.securityfocus.com/archive/1/516768/100/0/threaded
http://www.securityfocus.com/bid/46624
http://www.vupen.com/english/advisories/2011/0548	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65848

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:alcatel-lucent:omnivista::::::::
	cpe:2.3:a:alcatel-lucent:omnivista:4760_r5.0.07.05:::::::*

History

No history.

Information

Published : 2011-03-08 21:59

Updated : 2025-04-11 00:51

NVD link : CVE-2011-0345

Mitre link : CVE-2011-0345

CVE.ORG link : CVE-2011-0345

JSON object : View

Products Affected

alcatel-lucent

omnivista

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2011-0345", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-03-08T21:59:33.857", "references": [{"url": "http://seclists.org/fulldisclosure/2011/Mar/8", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/43507", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/8122", "source": "cve@mitre.org"}, {"url": "http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011002.pdf", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/516768/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/46624", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2011/0548", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65848", "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2011/Mar/8", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/43507", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securityreason.com/securityalert/8122", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011002.pdf", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/516768/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/46624", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2011/0548", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65848", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable."}, {"lang": "es", "value": "Vulnerabilidad de salto de directorio en el servidor NMS en Alcatel-Lucent OmniVista 4760 R5.1.06.03 y anteriores, permite a atacantes remotos leer ficheros locales de su elecci\u00f3n al utilizar secuencias transversales en peticiones HTTP GET, relacionado con la variable lang."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:alcatel-lucent:omnivista:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3DF1D042-8655-4993-B27E-45E0D2EE0324", "versionEndIncluding": "4760_r5.1.06.03"}, {"criteria": "cpe:2.3:a:alcatel-lucent:omnivista:4760_r5.0.07.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D96B47BA-D09F-4514-B58A-01A93A6D0D0A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}