PT-2009-2266 · Microsoft+1 · Exchange Server+1

Publicado 2009-05-07 · Atualizado 2009-05-08 · CVE-2008-6797

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Mitel NuPoint Messenger versions R11 and R3

Description: The issue concerns the server in Mitel NuPoint Messenger sending usernames and passwords in cleartext to Exchange servers. This allows remote attackers to obtain sensitive information by sniffing the network.

Recommendations: For versions R11 and R3, consider configuring the server to use encrypted communication with Exchange servers to protect sensitive information. As a temporary workaround, restrict access to the network to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2008-6797

Produtos afetados

Exchange Server

Mitel Nupoint Messenger

Referências · 4

• http://mitel.com/resources/NuPoint_and_Exchange.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6797 · Nota de Segurança
• http://securityfocus.com/bid/34847 · Nota
• http://kb.cert.org/vuls/id/576996 · Nota