Unscored CVE-2011-0345 EUVD-2011-0371GHSA-8hpm-8996-59q7

Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read…

Published Mar 8, 2011 · Updated Aug 6, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.

References

43507 third-party-advisory
8122 third-party-advisory
20110301 DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability [ CVE-2011-0345 ] mailing-list
ADV-2011-0548 vdb-entry
20110301 DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability [ CVE-2011-0345 ] mailing-list
46624 vdb-entry
http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011002.pdf
omnivista-lang-file-include(65848) vdb-entry