Lucene search
HistoryAug 25, 2008 - 9:41 p.m.
CVE-2008-3777
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
5.1%
The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obtain login credentials by reading these logs.
Affected configurations
Node
avayasip_enablement_servicesMatch5.0
Node
avayas8300c_server
avayacommunication_managerMatch5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| avaya | sip_enablement_services | 5.0 | cpe:2.3:a:avaya:sip_enablement_services:5.0:*:*:*:*:*:*:* |
| avaya | s8300c_server | * | cpe:2.3:h:avaya:s8300c_server:*:*:*:*:*:*:*:* |
| avaya | communication_manager | 5.0 | cpe:2.3:a:avaya:communication_manager:5.0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2008-3777
2008-08-25 21:00:00
prion
prion
Code injection
2008-08-25 21:41:00
cve
cve
CVE-2008-3777
2008-08-25 21:41:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2008-3777