PT-2009-2177 · Avaya · Avaya Communication Manager+1

Publicado 2009-04-10 · Atualizado 2017-08-17 · CVE-2008-6708

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Avaya SIP Enablement Services (SES) versions 3.x through 4.0 Avaya Communication Manager versions 3.1.x through 4.x

Description The issue affects the Web management interface, allowing remote authenticated administrators to gain root privileges. This is related to the configuration of data viewing or restoring parameters.

Recommendations For Avaya SIP Enablement Services (SES) versions 3.x through 4.0, restrict access to the Web management interface until a fix is available. For Avaya Communication Manager versions 3.1.x through 4.x, limit the configuration of data viewing or restoring parameters to authorized personnel only. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2008-6708

Produtos afetados

Avaya Communication Manager

Avaya Sip Enablement Services

Referências · 8

• http://securityfocus.com/bid/29939 · Nota
• http://secunia.com/advisories/30751 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43390 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6708 · Nota de Segurança
• http://osvdb.org/46604 · Nota
• http://vupen.com/english/advisories/2008/1943/references · Nota
• http://voipshield.com/research-details.php?id=77 · Nota