CVE-2008-6706
Summary
| CVE | CVE-2008-6706 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-04-10 22:00:00 UTC |
| Updated | 2017-08-17 01:29:00 UTC |
| Description | Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts "subscriber table passwords," (4) a system utility that decrypts database passwords, and (5) a system utility that encrypts "subscriber table passwords." |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Avaya | Communication Manager | 3.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.2 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.3 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | sp1 | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | sp2 | All | All |
| Application | Avaya | Communication Manager | 3.1.5 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.5 | sp0 | All | All |
| Application | Avaya | Communication Manager | 3.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.2 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.3 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | sp1 | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | sp2 | All | All |
| Application | Avaya | Communication Manager | 3.1.5 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.5 | sp0 | All | All |
| Application | Avaya | Sip Enablement Services | 3.0 | All | All | All |
| Application | Avaya | Sip Enablement Services | 3.1 | All | All | All |
| Application | Avaya | Sip Enablement Services | 3.1.1 | All | All | All |
| Application | Avaya | Sip Enablement Services | 4.0 | All | All | All |
| Application | Avaya | Sip Enablement Services | 3.0 | All | All | All |
| Application | Avaya | Sip Enablement Services | 3.1 | All | All | All |
| Application | Avaya | Sip Enablement Services | 3.1.1 | All | All | All |
| Application | Avaya | Sip Enablement Services | 4.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| 46602 | OSVDB | osvdb.org | |
| Nothing found for Research Details Php?id=85 | MISC | www.voipshield.com | |
| www.voipshield.com/research-details.php | MISC | www.voipshield.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Avaya SIP Enablement Services Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | SECUNIA | secunia.com | |
| Avaya Communication Manager Multiple Security Vulnerabilities | BID | www.securityfocus.com | |
| ASA-2008-268 | CONFIRM | support.avaya.com | Vendor Advisory |
| Nothing found for Research Details Php?id=84 | MISC | www.voipshield.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Nothing found for Research Details Php?id=83 | MISC | www.voipshield.com | |
| www.voipshield.com/research-details.php | MISC | www.voipshield.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.