9

CVE-2008-5709

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Avaya ≫ Communication Manager Version 3.1.1
Avaya ≫ Communication Manager Version 3.1.2
Avaya ≫ Communication Manager Version 3.1.3
Avaya ≫ Communication Manager Version 3.1.4 Update sp1
Avaya ≫ Communication Manager Version 4.0
Avaya ≫ Communication Manager Version 4.0.1
Avaya ≫ Communication Manager Version 4.0.1 Update sp15215
Avaya ≫ Communication Manager Version 4.0.1 Update sp15500
Avaya ≫ Communication Manager Version 4.0.3
Avaya ≫ Communication Manager Version 5.0
Avaya ≫ Communication Manager Version 5.0 Update sp1
Avaya ≫ Communication Manager Version 5.0 Update sp2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.35% 0.871
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/32204
Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm
Vendor Advisory
http://www.securityfocus.com/bid/31645
http://www.voipshield.com/research-details.php?id=121
http://www.voipshield.com/research-details.php?id=122
http://www.vupen.com/english/advisories/2008/2772
https://exchange.xforce.ibmcloud.com/vulnerabilities/45747
https://exchange.xforce.ibmcloud.com/vulnerabilities/45749