Avaya Communication Manager Web Administration Multiple Security Vulnerabilities
BID:31645
Info
Avaya Communication Manager Web Administration Multiple Security Vulnerabilities
| Bugtraq ID: | 31645 |
| Class: | Unknown |
| CVE: |
CVE-2008-5709 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 08 2008 12:00AM |
| Updated: | Apr 16 2015 05:52PM |
| Credit: | VoIPshield |
| Vulnerable: |
Avaya Communication Manager 4.0.3 SP1 Avaya Communication Manager 3.1.4 SP2 Avaya Communication Manager 5.1 Avaya Communication Manager 5.0 SP3 Avaya Communication Manager 5.0 Avaya Communication Manager 4.0 Avaya Communication Manager 3.1 |
| Not Vulnerable: | |
Discussion
Avaya Communication Manager Web Administration Multiple Security Vulnerabilities
Avaya Communication Manager is prone to multiple remote security vulnerabilities because it fails to adequately sanitize user-supplied input. These issues include a command-injection issue and a privilege-escalation issue.
Remote attackers can exploit these issues to execute arbitrary code with elevated privileges. Successful exploits can result in the complete compromise of affected computers.
Avaya Communication Manager is prone to multiple remote security vulnerabilities because it fails to adequately sanitize user-supplied input. These issues include a command-injection issue and a privilege-escalation issue.
Remote attackers can exploit these issues to execute arbitrary code with elevated privileges. Successful exploits can result in the complete compromise of affected computers.
Exploit / POC
Avaya Communication Manager Web Administration Multiple Security Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Avaya Communication Manager Web Administration Multiple Security Vulnerabilities
Solution:
A vendor update is available. Contact the vendor for details on obtaining the appropriate updates.
Solution:
A vendor update is available. Contact the vendor for details on obtaining the appropriate updates.
References
Avaya Communication Manager Web Administration Multiple Security Vulnerabilities
References:
References:
- Avaya Communication Manager Web Administration Interface - Code Execution Vulner (VoIPshield)
- Avaya Communication Manager Web Administration Interface - Privilege Elevation V (VoIPshield)
- Avaya Homepage (Avaya Inc.)
- ASA-2008-391 Input Validation Vulnerabilities in Avaya Communication Manager Web (Avaya )