CVE-2008-4383: Buffer Overflow
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4383?
CVE-2008-4383 is categorized as a medium severity vulnerability due to its potential for exploitation via a stack-based buffer overflow.
How do I fix CVE-2008-4383?
To mitigate CVE-2008-4383, upgrade the affected Alcatel OmniSwitch devices to the specified patched versions or later.
Which versions are affected by CVE-2008-4383?
Versions before 5.1.6.463.R02, 5.4.1.429.R01, 6.1.3.965.R01, 6.1.5.595.R01, and 6.3.1.96 of Alcatel OmniSwitch devices are vulnerable to CVE-2008-4383.
What types of devices are affected by CVE-2008-4383?
CVE-2008-4383 affects various models within the Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series.
Is CVE-2008-4383 remotely exploitable?
Yes, CVE-2008-4383 is remotely exploitable, allowing attackers to execute arbitrary code on affected devices.