CVE-2008-6708
Summary
| CVE | CVE-2008-6708 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-04-10 22:00:00 UTC |
| Updated | 2017-08-17 01:29:00 UTC |
| Description | Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or restoring parameters." |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Avaya | Communication Manager | 3.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.2 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.3 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.5 | All | All | All |
| Application | Avaya | Communication Manager | 4.0 | All | All | All |
| Application | Avaya | Communication Manager | 4.0.1 | All | All | All |
| Application | Avaya | Communication Manager | 4.0.1 | sp15215 | All | All |
| Application | Avaya | Communication Manager | 4.0.1 | sp15500 | All | All |
| Application | Avaya | Communication Manager | 4.0.3 | All | All | All |
| Application | Avaya | Communication Manager | 3.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.1 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.2 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.3 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.4 | All | All | All |
| Application | Avaya | Communication Manager | 3.1.5 | All | All | All |
| Application | Avaya | Communication Manager | 4.0 | All | All | All |
| Application | Avaya | Communication Manager | 4.0.1 | All | All | All |
| Application | Avaya | Communication Manager | 4.0.1 | sp15215 | All | All |
| Application | Avaya | Communication Manager | 4.0.1 | sp15500 | All | All |
| Application | Avaya | Communication Manager | 4.0.3 | All | All | All |
| Application | Avaya | Sip Enablement Services | 3.0 | All | All | All |
| Application | Avaya | Sip Enablement Services | 3.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| www.voipshield.com/research-details.php | MISC | www.voipshield.com | |
| 46604 | OSVDB | osvdb.org | |
| Avaya SIP Enablement Services Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | SECUNIA | secunia.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Avaya Communication Manager Multiple Security Vulnerabilities | BID | www.securityfocus.com | |
| ASA-2008-268 | CONFIRM | support.avaya.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.