CVE-2008-5710

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

CVE-2008-5709

CVE-2008-5709 affects Avaya Communication Manager (CM) web management interface. Affects CM versions 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3. Remote authenticated users can execute arbitrary code via unknown vectors in the (1) Set Static Routes and (2) Backup History co...

CVE-2008-5709

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

CVE-2008-5710

CVE-2008-5710 affects Avaya Communication Manager (CM) web management interface across CM 3.1.x, 4.0.3, and 5.x. The described vulnerability class is multiple unspecified issues that allow remote attackers to read files (configuration, logs, binary image, and help files) via unknown vectors. The ...

CVE-2008-5709: Improper Input Validation

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

CVE-2008-5710: Undefined Security Weakness

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

Avaya Communication Manager Web Server配置未授权访问漏洞

BUGTRAQ ID: 31639 CNCAN ID：CNCAN-2008100904 Avaya Communication Manager是一款IP语音通信管理解决方案。 Avaya Communication Manager WEB服务器存在配置错误问题，远程攻击者可以获得未授权用户不能获得的敏感信息，如： -未授权访问配置文件 -未授权访问日志文件 -未授权访问两进制映像文件 -未授权访问帮助文件 目前没有详细漏洞细节提供。 0 Avaya Communication Manager 4.0 目前Avaya供应商还没有提供解决方案，建议用户关注： a...

Code injection

The SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, writes account names and passwords to the 1 alarm and 2 system logs during failed login attempts, which allows local users to obtain login credentials by...

CVE-2008-3778

The remote management interface in SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service...

CVE-2008-3778

The remote management interface in SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service...

CVE-2008-3777

The SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, writes account names and passwords to the 1 alarm and 2 system logs during failed login attempts, which allows local users to obtain login credentials by...

CVE-2008-3777: Exposure of Sensitive Information to an Unauthorized Actor

The SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, writes account names and passwords to the 1 alarm and 2 system logs during failed login attempts, which allows local users to obtain login credentials by...

CVE-2008-3778: Undefined Security Weakness

The remote management interface in SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service...

Linux Kernel x86_64 ptrace Denial Of Service Vulnerability

Linux内核存在拒绝服务漏洞，当进程执行在64位的计算机时。 本地攻击者可以利用这个问题的崩溃和内核拒绝服务的合法用户。 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10...

Input validation

Multiple unspecified "input validation" vulnerabilities in the Web management interface aka Messaging Administration interface in Avaya Message Storage Server MSS 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user...

CVE-2008-3081

Multiple unspecified "input validation" vulnerabilities in the Web management interface aka Messaging Administration interface in Avaya Message Storage Server MSS 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user...

CVE-2008-3081: Improper Input Validation

Multiple unspecified "input validation" vulnerabilities in the Web management interface aka Messaging Administration interface in Avaya Message Storage Server MSS 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user...

Avaya产品WEB管理接口输入验证漏洞

BUGTRAQ ID: 29939,29938 Avaya是一家提供IP通信以及面向企业的通信网络设计、建造、部署和管理的厂商。 Avaya的Communication Manager、Message Storage Server和Avaya SIP Enablement Services 产品的WEB管理接口存在输入验证错误，如果远程攻击者向上述产品的WEB管理接口提交了恶意请求的话，就可能导致读取敏感信息或执行任意指令。 0 AVAYA Communication Manager 4.x AVAYA Communication Manager 3.1.x AVAYA SIP...

Avaya Communication Manager存在多个安全漏洞

BUGTRAQ ID: 29939 CNCAN ID：CNCAN-2008062702 Avaya Communication Manager是一款IP语音通信解决方案。 Avaya Communication Manager WEB管理接口存在多个安全问题，远程攻击者可以利用漏洞执行任意代码，提升特权，获得敏感信息等攻击。 -配置数据查看或恢复信任凭证时存在问题可导致提升特权。 -配置本地数据查看和恢复参数时可导致以登录用户进程权限执行系统命令。 -配置存在问题可导致系统信息恢复，包括加密密码信息。 -无需验证从对象文件夹中执行脚本。 -无需验证可执行不需要的默认应用程序。...

Design/Logic Flaw

Internet Communication Manager aka ICMAN.exe or ICM in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service process crash via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web...