[Forgot Password]
Login  Register Subscribe

23631

 
 

115084

 
 

97147

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-5709

Date: (C)2008-12-24   (M)2017-08-08 


Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.

CVSS Score: 9.0Access Vector: NETWORK
Exploit Score: 8.0Access Complexity: LOW
Impact Score: 10.0Authentication: SINGLE_INSTANCE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
BID-31645
SECUNIA-32204
ADV-2008-2772
avaya-cm-backuphistory-cmd-execution(45747)
avaya-cm-setstatic-command-execution(45749)
http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm
http://www.voipshield.com/research-details.php?id=121
http://www.voipshield.com/research-details.php?id=122

CPE    4
cpe:/a:avaya:communication_manager:3.1.2
cpe:/a:avaya:communication_manager:3.1.3
cpe:/a:avaya:communication_manager:3.1.4:sp1
cpe:/a:avaya:communication_manager:3.1.1
...
CWE    1
CWE-20

© 2013 SecPod Technologies