Lucene search

[email protected]CVE-2008-5709

HistoryDec 24, 2008 - 6:29 p.m.

CVE-2008-5709

2008-12-2418:29:15

CWE-20

[email protected]

web.nvd.nist.gov

avaya

communication manager

web management

interface

vulnerability

remote code execution

cve-2008-5709

nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

86.9%

JSON

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.

Affected configurations

NVD

Node

avayacommunication_managerMatch3.1.1

avayacommunication_managerMatch3.1.2

avayacommunication_managerMatch3.1.3

avayacommunication_managerMatch3.1.4sp1

avayacommunication_managerMatch4.0

avayacommunication_managerMatch4.0.1

avayacommunication_managerMatch4.0.1sp15215

avayacommunication_managerMatch4.0.1sp15500

avayacommunication_managerMatch4.0.3

avayacommunication_managerMatch5.0

avayacommunication_managerMatch5.0sp1

avayacommunication_managerMatch5.0sp2

CPENameOperatorVersion
avaya:communication_manageravaya communication managereq3.1.1
avaya:communication_manageravaya communication managereq3.1.2
avaya:communication_manageravaya communication managereq3.1.3
avaya:communication_manageravaya communication managereq3.1.4
avaya:communication_manageravaya communication managereq4.0
avaya:communication_manageravaya communication managereq4.0.1
avaya:communication_manageravaya communication managereq4.0.3
avaya:communication_manageravaya communication managereq5.0

CPE	Name	Operator	Version
avaya:communication_manager	avaya communication manager	eq	3.1.1
avaya:communication_manager	avaya communication manager	eq	3.1.2
avaya:communication_manager	avaya communication manager	eq	3.1.3
avaya:communication_manager	avaya communication manager	eq	3.1.4
avaya:communication_manager	avaya communication manager	eq	4.0
avaya:communication_manager	avaya communication manager	eq	4.0.1
avaya:communication_manager	avaya communication manager	eq	4.0.3
avaya:communication_manager	avaya communication manager	eq	5.0

References

secunia.com/advisories/32204

support.avaya.com/elmodocs2/security/ASA-2008-391.htm

www.securityfocus.com/bid/31645

www.voipshield.com/research-details.php?id=121

www.voipshield.com/research-details.php?id=122

www.vupen.com/english/advisories/2008/2772

exchange.xforce.ibmcloud.com/vulnerabilities/45747

exchange.xforce.ibmcloud.com/vulnerabilities/45749

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

86.9%

JSON

Related for CVE-2008-5709

prion1 cvelist1 nvd1