PT-2009-2044 · Avaya · Avaya Communication Manager

Published 2009-04-01 · Updated 2017-08-17 · CVE-2008-6574

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Avaya Communication Manager versions 3.1.x through 4.x

Description The issue allows remote attackers to gain privileges and cause a denial of service. This is related to the reuse of valid credentials, although the exact vectors are unknown.

Recommendations For Avaya Communication Manager versions 3.1.x through 4.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-6574

Affected Products

Avaya Communication Manager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-6574 · Security Note
• http://secunia.com/advisories/29744 · Vendor Advisory
• http://securityfocus.com/bid/28687 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41734 · Note
• http://voipshield.com/research-details.php?id=24 · Note
• http://osvdb.org/44288 · Note