Alcatel OmniPCX Default File Permissions World Writeable Vulnerability

Bugtraq ID:	4133
Class:	Design Error
CVE:	CVE-2002-0295
Remote:	No
Local:	Yes
Published:	Feb 19 2002 12:00AM
Updated:	Jul 11 2009 10:56AM
Credit:	This vulnerability was announced in a Security Bugware Advisory on February 19, 2002.
Vulnerable:	Alcatel-Lucent OmniPCX 4400 0
Not Vulnerable:

Alcatel OmniPCX Default File Permissions World Writeable Vulnerability

OmniPCX is an enterprise-level Personal Communications Exchange (PCX) system maintained and distributed by Alcatel.

Numerous directories and files on a OmniPCX system are world writeable. This is not inherently an issue, as OmniPCX systems are not designed for multi-user access. However, if a remote user gains access to a system via an unprivileged user account, or through one of the known login and password combinations described in Bugtraq ID 4127 "Alcatel OmniPCX Default Passwords Vulnerability," an unprivileged user may gain write access to configuration files.

Writeable files and directories include:

/chetc/menus
/chetc/msg
/chetc/lck
/etc/bootptab
/etc/mnttab
/etc/misc
/fs
/mnt
/usr2
/usr/ctsrv
/usr/preserve
/usr/tmp
/usr2/soft_install

Alcatel OmniPCX Default File Permissions World Writeable Vulnerability

No exploit is required for this vulnerability.

Alcatel OmniPCX Default File Permissions World Writeable Vulnerability

References:

• OmniPCX 4400 Product Page (Alcatel)