KLA10056 RLF vulnerability in Alcatel-Lucent OmniVista 4760

A directory traversal vulnerability was found in OmniVista. By exploiting this vulnerability malicious users can read local files. This vulnerability can be exploited from the network at a point related to NMS server via specially designed GET request.

Original advisories

Alcatel bulletin

Related products

Alcatel-OmniVista

CVE list

CVE-2011-0345 warning

Solution

Update to latest version

Impacts

• RLF

Read Local Files. Exploitation of vulnerabilities with this impact can lead to reading some inaccessible files. Files that can be read depends on conсrete program errors.

Affected Products

• Alcatel-Lucent OmniVista 4760 all versions