CVE-2007-3010

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2007-3010

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

m

asterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

References
Link Resource
http://marc.info/?l=full-disclosure&m=119002152126755&w=2 Exploit Mailing List
http://osvdb.org/40521 Broken Link
http://secunia.com/advisories/26853 Broken Link Vendor Advisory
http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php Broken Link
http://www.securityfocus.com/archive/1/479699/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/25694 Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/3185 Broken Link
http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/36632 Third Party Advisory VDB Entry
http://marc.info/?l=full-disclosure&m=119002152126755&w=2 Exploit Mailing List
http://osvdb.org/40521 Broken Link
http://secunia.com/advisories/26853 Broken Link Vendor Advisory
http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php Broken Link
http://www.securityfocus.com/archive/1/479699/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/25694 Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/3185 Broken Link
http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/36632 Third Party Advisory VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-3010
Configurations

Configuration 1 (hide)

cpe:2.3:a:al-enterprise:omnipcx_enterprise_communication_server:*:*:*:*:*:*:*:*
History

22 Oct 2025, 01:15

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-3010 -

21 Oct 2025, 20:15

Type Values Removed Values Added
References
  • {'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-3010', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}

21 Oct 2025, 19:15

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-3010 -

07 Feb 2025, 15:15

Type Values Removed Values Added
CWE CWE-77

21 Nov 2024, 00:32

Type Values Removed Values Added
References () http://marc.info/?l=full-disclosure&m=119002152126755&w=2 - Exploit, Mailing List () http://marc.info/?l=full-disclosure&m=119002152126755&w=2 - Exploit, Mailing List
References () http://osvdb.org/40521 - Broken Link () http://osvdb.org/40521 - Broken Link
References () http://secunia.com/advisories/26853 - Broken Link, Vendor Advisory () http://secunia.com/advisories/26853 - Broken Link, Vendor Advisory
References () http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php - Broken Link () http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php - Broken Link
References () http://www.securityfocus.com/archive/1/479699/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/archive/1/479699/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securityfocus.com/bid/25694 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/25694 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.vupen.com/english/advisories/2007/3185 - Broken Link () http://www.vupen.com/english/advisories/2007/3185 - Broken Link
References () http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm - Broken Link () http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm - Broken Link
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/36632 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/36632 - Third Party Advisory, VDB Entry

02 Jul 2024, 17:43

Type Values Removed Values Added
References () http://marc.info/?l=full-disclosure&m=119002152126755&w=2 - Exploit () http://marc.info/?l=full-disclosure&m=119002152126755&w=2 - Exploit, Mailing List
References () http://osvdb.org/40521 - () http://osvdb.org/40521 - Broken Link
References () http://secunia.com/advisories/26853 - Vendor Advisory () http://secunia.com/advisories/26853 - Broken Link, Vendor Advisory
References () http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php - () http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php - Broken Link
References () http://www.securityfocus.com/archive/1/479699/100/0/threaded - () http://www.securityfocus.com/archive/1/479699/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securityfocus.com/bid/25694 - () http://www.securityfocus.com/bid/25694 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.vupen.com/english/advisories/2007/3185 - () http://www.vupen.com/english/advisories/2007/3185 - Broken Link
References () http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm - () http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm - Broken Link
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/36632 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/36632 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:* cpe:2.3:a:al-enterprise:omnipcx_enterprise_communication_server:*:*:*:*:*:*:*:*
CVSS v2 : 10.0
v3 : unknown 		v2 : 10.0
v3 : 9.8
CWE CWE-20 NVD-CWE-noinfo
First Time Al-enterprise omnipcx Enterprise Communication Server
Al-enterprise
Information

Published : 2007-09-18 21:17

Updated : 2025-10-22 01:15

NVD link : CVE-2007-3010

Mitre link : CVE-2007-3010

CVE.ORG link : CVE-2007-3010

JSON object : View

Products Affected

al-enterprise

CWE
NVD-CWE-noinfo CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')