PT-2012-5014 · Avaya · Avaya Ip Office Customer Call Reporter

Andrea Micalizzi · Published 2012-06-28 · Updated 2012-07-17 · CVE-2012-3811

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Avaya IP Office Customer Call Reporter versions 7.0 through 7.0.5.8 Avaya IP Office Customer Call Reporter versions 8.0 through 8.0.9.13

Description The issue concerns an unrestricted file upload vulnerability in the ImageUpload.ashx component of the Wallboard application. This allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.

Recommendations For Avaya IP Office Customer Call Reporter versions 7.0 through 7.0.5.8, update to version 7.0.5.8 Q1 2012 Maintenance Release or later. For Avaya IP Office Customer Call Reporter versions 8.0 through 8.0.9.13, update to version 8.0.9.13 Q1 2012 Maintenance Release or later.

Exploit

Fix

Related Identifiers

CVE-2012-3811

ZDI-12-106

Affected Products

Avaya Ip Office Customer Call Reporter

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/avaya_ccr_imageupload_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/21847 · Exploit
• https://zerodayinitiative.com/advisories/ZDI-12-106 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-3811 · Security Note
• https://downloads.avaya.com/css/P8/documents/100164021 · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-12-106 · Note