CVE-2008-5710
Summary
| CVE | CVE-2008-5710 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-12-24 18:29:00 UTC |
| Updated | 2017-08-08 01:33:00 UTC |
| Description | Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote attackers to read (1) configuration files, (2) log files, (3) binary image files, and (4) help files via unknown vectors. |
Risk And Classification
Problem Types: CWE-16
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Avaya | Communication Manager | 3.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.2 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.3 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | sp1 | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | sp2 | All | All |
| Application | Avaya | Communication Manager | 3.1.5 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.5 | sp0 | All | All |
| Application | Avaya | Communication Manager | 4.0.3 | All | All | All |
| Application | Avaya | Communication Manager | 5.0 | All | All | All |
| Application | Avaya | Communication Manager | 5.0 | sp1 | All | All |
| Application | Avaya | Communication Manager | 5.0 | sp2 | All | All |
| Application | Avaya | Communication Manager | 5.0 | sp3 | All | All |
| Application | Avaya | Communication Manager | 5.1 | All | All | All |
| Application | Avaya | Communication Manager | 5.1 | sp1 | All | All |
| Application | Avaya | Communication Manager | 5.1.1 | All | All | All |
| Application | Avaya | Communication Manager | 5.1.1 | sp1 | All | All |
| Application | Avaya | Communication Manager | 5.1.2 | All | All | All |
| Application | Avaya | Communication Manager | 5.1.2 | sp0 | All | All |
| Application | Avaya | Communication Manager | 3.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.2 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.3 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | sp1 | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | sp2 | All | All |
| Application | Avaya | Communication Manager | 3.1.5 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.5 | sp0 | All | All |
| Application | Avaya | Communication Manager | 4.0.3 | All | All | All |
| Application | Avaya | Communication Manager | 5.0 | All | All | All |
| Application | Avaya | Communication Manager | 5.0 | sp1 | All | All |
| Application | Avaya | Communication Manager | 5.0 | sp2 | All | All |
| Application | Avaya | Communication Manager | 5.0 | sp3 | All | All |
| Application | Avaya | Communication Manager | 5.1 | All | All | All |
| Application | Avaya | Communication Manager | 5.1 | sp1 | All | All |
| Application | Avaya | Communication Manager | 5.1.1 | All | All | All |
| Application | Avaya | Communication Manager | 5.1.1 | sp1 | All | All |
| Application | Avaya | Communication Manager | 5.1.2 | All | All | All |
| Application | Avaya | Communication Manager | 5.1.2 | sp0 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Avaya Communication Manager Web Server Configuration Unauthorized Access Vulnerability | BID | www.securityfocus.com | |
| Avaya Communication Manager Information Disclosure Vulnerability - Secunia.com | SECUNIA | secunia.com | Vendor Advisory |
| ASA-2008-394 | CONFIRM | support.avaya.com | Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Nothing found for Research Details Php?id=123 | MISC | www.voipshield.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.