CVE-2008-4383 - CVE House
Back to Database
Status published Critical CVE-2008-4383

Stack-based buffer overflow in the Agranet-Emweb embedded management web server...

Vulnerability Description

Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and OS9000 Series devices with AoS 5.1 before 5.1.6.463.R02, 5.4 before 5.4.1.429.R01, 6.1.3 before 6.1.3.965.R01, 6.1.5 before 6.1.5.595.R01, and 6.3 before 6.3.1.966.R01 allows remote attackers to execute arbitrary code via a long Session cookie.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-4383

Credits & Attribution

No credits recorded in the NVD database.

References

More from alcatel

View All →
CVE-2018-6597
The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys...
Medium 6.8
CVE-2011-4505
The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware...
High 7.5
CVE-2007-5385
Multiple cross-site scripting (XSS) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G...
Medium 4.3
CVE-2007-5384
Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch...
Medium 4.3
CVE-2007-5383
The Thomson/Alcatel SpeedTouch 7G router, as used for the BT...
Critical 10

Affected Vendor

Affected Software

aos
Vulnerable Versions:
5.1, 5.4, 6.1.3, 6.1.5, 6.3

Timeline

Official Publish: October 3rd, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.