جزئیات آسیب‌پذیری

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

• http://www.vupen.com/english/advisories/2007/3185 vdb-entryx_refsource_VUPEN
• http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php x_refsource_MISC
• http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm x_refsource_CONFIRM
• http://secunia.com/advisories/26853 third-party-advisoryx_refsource_SECUNIA
• http://marc.info/?l=full-disclosure&m=119002152126755&w=2 mailing-listx_refsource_FULLDISC
• http://osvdb.org/40521 vdb-entryx_refsource_OSVDB
• http://www.securityfocus.com/archive/1/479699/100/0/threaded mailing-listx_refsource_BUGTRAQ
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36632 vdb-entryx_refsource_XF
• http://www.securityfocus.com/bid/25694 vdb-entryx_refsource_BID
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-3010 government-resource