Vulnerability record · CVE-2011-0344 · published 8 March 2011

CVE-2011-0344: Alcatel-lucent omnipcx memory buffer overflow vulnerability

AAlcatel Lucent · Omnipcx

Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server in the Communication Server (CS) in Alcatel-Lucent OmniPCX Enterprise before R9.0 H1.301.50 allow remote attackers to execute arbitrary code via crafted HTTP headers.

5.8 CVSS 2.0 Medium EPSS 2.3% · top 17.2% CWE-119 · Memory buffer overflow

5.8CVSS 2.0 base score

2.3%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

12References

16 Jun 2026Last modified by NVD

Description

AV:A/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

AOmnipcx Alcatel Lucent

References

Link	Tags
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=896
http://secunia.com/advisories/43588	Vendor Advisory
http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011	Vendor Advisory
http://www.securityfocus.com/bid/46640
http://www.vupen.com/english/advisories/2011/0549	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65849
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=896
http://secunia.com/advisories/43588	Vendor Advisory
http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011	Vendor Advisory
http://www.securityfocus.com/bid/46640
http://www.vupen.com/english/advisories/2011/0549	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65849

Track CVE-2011-0344 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2002-1691Alcatel-lucent omnipcx vulnerabilityAlcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthori…EPSS 3.6%31 Dec 2002 8.5CVE-2007-5361Alcatel-lucent omnipcx vulnerabilityThe Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP request from an IP Touch phone, and …EPSS 2.4%20 Nov 2007 7.5CVE-2007-2512Alcatel-lucent omnipcx vulnerabilityAlcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access …EPSS 1.2%7 Jun 2007 6.2CVE-2002-0293Alcatel-lucent omnipcx vulnerabilityFTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.EPSS 0.29%31 May 2002 5.0CVE-2003-1108Alcatel-lucent omnipcx vulnerabilityThe Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and po…EPSS 5.0%31 Dec 2003 4.6CVE-2002-0295Alcatel-lucent omnipcx vulnerabilityAlcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges.EPSS 0.31%31 May 2002 2.1CVE-2002-0294Alcatel-lucent omnipcx vulnerabilityAlcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system.EPSS 0.29%31 May 2002 9.5CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityVulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 F…KEV27 Sep 2026

Source: NIST National Vulnerability Database (record CVE-2011-0344), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.