Vulnerabilities > Alcatel Lucent

DATE CVE VULNERABILITY TITLE RISK
2007-02-14 CVE-2007-0932 Permissions, Privileges, and Access Controls vulnerability in multiple products
The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN.
network
low complexity
alcatel-lucent aruba CWE-264
7.5
2007-02-14 CVE-2007-0931 Multiple vulnerability in Aruba Mobility Controller
Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via long credential strings.
network
low complexity
alcatel-lucent aruba
7.5
2003-12-31 CVE-2003-1108 Unspecified vulnerability in Alcatel-Lucent Omnipcx 5.0
The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
network
low complexity
alcatel-lucent
5.0
2002-12-31 CVE-2002-1691 Unspecified vulnerability in Alcatel-Lucent Omnipcx 4400
Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthorized access.
network
low complexity
alcatel-lucent
critical
10.0
2002-05-31 CVE-2002-0295 Unspecified vulnerability in Alcatel-Lucent Omnipcx 4400
Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges.
local
low complexity
alcatel-lucent
4.6
2002-05-31 CVE-2002-0294 Denial Of Service vulnerability in Alcatel-Lucent Omnipcx 4400
Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system.
local
low complexity
alcatel-lucent
2.1
2002-05-31 CVE-2002-0293 Local Security vulnerability in Alcatel-Lucent Omnipcx 4400
FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.
local
high complexity
alcatel-lucent
6.2