Deral Heiland has reported a vulnerability in various OmniSwitch products, which can be exploited by malicious people to cause a DoS (Denial of Service) or to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the embedded management web server when processing the "Session" cookie. This can be exploited to cause a stack-based buffer overflow by sending a specially crafted GET request containing an overly long "Session" cookie.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in the following Alcatel OmniSwitch products:
* OS7000 Series
* OS6600 Series
* OS6800 Series
* OS6850 Series
* OS9000 Series

Solution
Update to the following versions:
Further details available to Secunia VIM customers

Provided and/or discovered by
Deral Heiland, Layered Defense Research

Changelog
Further details available to Secunia VIM customers

Original Advisory
Alcatel-Lucent:
http://www1.alcatel-lucent.com/psirt/statements/2008002/OmniSwitch.htm

Layered Defense Research:
http://www.layereddefense.com/alcatel12aug.html

Deep Links
Links available to Secunia VIM customers