CVE-2008-1331
- State
- Published
- Severity
- Not scored
- Published
- Apr 2, 2008
- Updated
- Aug 7, 2024
- Reserved
- Mar 13, 2008
Description
cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 5662exploit
- http://www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htm
- 29798third-party-advisory
- ADV-2008-1057vdb-entry
- omnipcx-cgiscript-info-disclosure(41560)vdb-entry
- 28758vdb-entry
- 20080521 [DSECRG-08-020] Alcatel OmniPCX Office Remote Comand Executionmailing-list
- 1020082vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.