CVE-2008-6575

Technical details about CVE-2008-6575 are not publicly provided in the connected documents. The materials only reiterate an unspecified denial-of-service against Avaya SES SIP server. Monitor for updates and new advisories to clarify impact and remediation.

CVE-2008-3778

CVE-2008-3778 affects Avaya SIP Enablement Services (SES) Server 5.0 and Communication Manager 5.0 on the S8300C with SES enabled. The remote management interface can proceed with Core router updates even after an invalid login, enabling remote attackers to cause a messaging outage (DoS) or to ga...

CVE-2008-3777

The SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, writes account names and passwords to the 1 alarm and 2 system logs during failed login attempts, which allows local users to obtain login credentials by...

Linux Kernel x86_64 ptrace Denial Of Service Vulnerability

Linux内核存在拒绝服务漏洞，当进程执行在64位的计算机时。 本地攻击者可以利用这个问题的崩溃和内核拒绝服务的合法用户。 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10...

AIX 530005 : U809468

The remote host is missing AIX PTF U809468 which is related to the security of the package devices.scsi.ses.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

oracle1016-xss.txt

Name Cross-Site-Scripting Vulnerability in Oracle Secure Enterprise Search Systems Affected Oracle Secure Enterprise Search 10.1.6- SES Severity Medium Risk Category Cross Site Scripting XSS/CSS Vendor URL http://www.oracle.com/ Author Alexander Kornbrust ak at red-database-security.com Date 17...

Command injection

Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors aka "shell command injection"...