PT-2009-2178 · Avaya · Avaya Communication Manager+1

Publicado 2009-04-10 · Atualizado 2017-08-17 · CVE-2008-6709

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Avaya SIP Enablement Services (SES) versions 3.x through 4.0 Avaya Communication Manager versions 3.1.x

Description The issue allows remote authenticated users to execute arbitrary commands, related to the configuration of local data viewing or restoring parameters in the Web management interface.

Recommendations For Avaya SIP Enablement Services (SES) versions 3.x through 4.0, restrict access to the Web management interface until a fix is available. For Avaya Communication Manager versions 3.1.x, consider disabling remote access to the configuration of local data viewing or restoring parameters as a temporary workaround.

Correção

Identificadores relacionados

CVE-2008-6709

Produtos afetados

Avaya Communication Manager

Avaya Sip Enablement Services

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-6709 · Nota de Segurança
• http://securityfocus.com/bid/29939 · Nota
• http://osvdb.org/46603 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm · Aviso do Fabricante
• http://voipshield.com/research-details.php?id=78 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43380 · Nota
• http://vupen.com/english/advisories/2008/1943/references · Nota
• http://secunia.com/advisories/30751 · Nota