CVE-2011-0344: Alcatel-Lucent OmniPCX

Medium severity, CVSS 5.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server in the Communication Server (CS) in Alcatel-Lucent OmniPCX Enterprise before R9.0 H1.301.50 allow remote attackers to execute arbitrary code via crafted HTTP headers.

Affected products

• Alcatel-Lucent OmniPCX: up to and including 9.0; version 5.0 only; version 6.2 only; version 7.0 only; version 7.1 only; version 8.0 only

Published 2011-03-08. Last modified 2026-06-16.