https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:19:19 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-29150 <p>An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of improper privilege management, an authenticated attacker is able to create symlinks to sensitive and protected data in locations that are used for debugging files. Given that the process of gathering debug logs is carried out with root privileges, any file referenced in the symlink is consequently written to the debug archive, thereby granting accessibility to the attacker.</p> <p>An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of improper privilege management, an authenticated attacker is able to create symlinks to sensitive and protected data in locations that are used for debugging files. Given that the process of gathering debug logs is carried out with root privileges, any file referenced in the symlink is consequently written to the debug archive, thereby granting accessibility to the attacker.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-29150 https://vulnerability.circl.lu/vuln/ghsa-6jj6-4cwr-qpr2 <p>An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of improper privilege management, an authenticated attacker is able to create symlinks to sensitive and protected data in locations that are used for debugging files. Given that the process of gathering debug logs is carried out with root privileges, any file referenced in the symlink is consequently written to the debug archive, thereby granting accessibility to the attacker.</p> <p>An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of improper privilege management, an authenticated attacker is able to create symlinks to sensitive and protected data in locations that are used for debugging files. Given that the process of gathering debug logs is carried out with root privileges, any file referenced in the symlink is consequently written to the debug archive, thereby granting accessibility to the attacker.</p> https://vulnerability.circl.lu/vuln/ghsa-6jj6-4cwr-qpr2 https://vulnerability.circl.lu/vuln/gsd-2024-29150 gsd-2024-29150 https://vulnerability.circl.lu/vuln/gsd-2024-29150 https://vulnerability.circl.lu/vuln/wid-sec-w-2024-1524 <p>Ein physischer oder ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Alcatel Lucent Enterprise Desk Phone ausnutzen, um seine Rechte zu erweitern oder Informationen offenzulegen.</p> <p>Ein physischer oder ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Alcatel Lucent Enterprise Desk Phone ausnutzen, um seine Rechte zu erweitern oder Informationen offenzulegen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2024-1524