CVE-2008-6710

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials."...

CVE-2008-6711

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs."...

CVE-2008-6711

CVE-2008-6711 affects Avaya Communication Manager’s Web administration interface. A vulnerability in CM 3.1.x (before 3.1.4 SP2) and CM 4.0.x (before 4.0.3 SP1) allows remote authenticated users to execute arbitrary commands via unknown vectors related to viewing system logs. Impact is user-privi...

CVE-2008-6710: Undefined Security Weakness

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials."...

CVE-2008-6711: Undefined Security Weakness

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs."...

CVE-2008-6574

Unspecified vulnerability in SIP Enablement Services SES in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges and cause a denial of service via unknown vectors related to reuse of valid credentials...

Code injection

Unspecified vulnerability in SIP Enablement Services SES in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges and cause a denial of service via unknown vectors related to reuse of valid credentials...

Code injection

Unspecified vulnerability in the SIP server in SIP Enablement Services SES in Avaya Communication Manager 3.1.x and 4.x allows remote authenticated users to cause a denial of service resource consumption via unknown vectors...

CVE-2008-6573

Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services SES in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager SPIM in the web...

CVE-2008-6575

Technical details about CVE-2008-6575 are not publicly provided in the connected documents. The materials only reiterate an unspecified denial-of-service against Avaya SES SIP server. Monitor for updates and new advisories to clarify impact and remediation.

CVE-2008-6574

CVE-2008-6574 affects Avaya Communication Manager SIP Enablement Services (SES) on versions 3.1.x and 4.x. The vulnerability allows remote attackers to gain privileges and cause a denial of service through unspecified vectors related to reuse of valid credentials. The connected documents do not p...

CVE-2008-6575

Unspecified vulnerability in the SIP server in SIP Enablement Services SES in Avaya Communication Manager 3.1.x and 4.x allows remote authenticated users to cause a denial of service resource consumption via unknown vectors...

CVE-2008-6574

Unspecified vulnerability in SIP Enablement Services SES in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges and cause a denial of service via unknown vectors related to reuse of valid credentials...

CVE-2008-6573: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services SES in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager SPIM in the web...

CVE-2008-6574: Undefined Security Weakness

Unspecified vulnerability in SIP Enablement Services SES in Avaya Communication Manager 3.1.x and 4.x allows remote attackers to gain privileges and cause a denial of service via unknown vectors related to reuse of valid credentials...

CVE-2008-6575: Undefined Security Weakness

Unspecified vulnerability in the SIP server in SIP Enablement Services SES in Avaya Communication Manager 3.1.x and 4.x allows remote authenticated users to cause a denial of service resource consumption via unknown vectors...

CVE-2008-5709

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

CVE-2008-5710

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...