Alcatel-Lucent OmniVista 4760 Network Management System 'lang' Directory Traversal Vulnerability

Bugtraq ID:	46624
Class:	Input Validation Error
CVE:	CVE-2011-0345
Remote:	Yes
Local:	No
Published:	Mar 01 2011 12:00AM
Updated:	Mar 01 2011 12:00AM
Credit:	Digital Defense, Inc. Vulnerability Research Team
Vulnerable:	Alcatel-Lucent OmniVista 4760 Network Management System 5.1.06.03 Alcatel-Lucent OmniVista 4760 Network Management System 5.0.07.05
Not Vulnerable:

Alcatel-Lucent OmniVista 4760 Network Management System 'lang' Directory Traversal Vulnerability

OmniVista 4760 Network Management System is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker could exploit this vulnerability using directory-traversal strings to retrieve arbitrary files from a vulnerable system. This may aid in further attacks.

OmniVista 4760 5.0.07.05 and 5.1.06.03 are affected; other versions may also be vulnerable.

Alcatel-Lucent OmniVista 4760 Network Management System 'lang' Directory Traversal Vulnerability

Attackers can use readily available tools and commands to exploit this issue.

Alcatel-Lucent OmniVista 4760 Network Management System 'lang' Directory Traversal Vulnerability

Solution:
The vendor has released fixes. Please see the references for more information.

Alcatel-Lucent OmniVista 4760 Network Management System 'lang' Directory Traversal Vulnerability

References:

• Alcatel-Lucent Homepage (Alcatel-Lucent)
  
• DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory (ddivulnalert)