Avaya Argent Office SNMP Authentication Mechanism Weaknesses
BID:8974
Info
Avaya Argent Office SNMP Authentication Mechanism Weaknesses
| Bugtraq ID: | 8974 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 07 2001 12:00AM |
| Updated: | Aug 07 2001 12:00AM |
| Credit: | The discovery of this vulnerability has been credited to Jacek Lipkowski <[email protected]>. |
| Vulnerable: |
Avaya Argent Office 0 |
| Not Vulnerable: | |
Discussion
Avaya Argent Office SNMP Authentication Mechanism Weaknesses
It has been reported that Avaya Argent Office implements the use of a weak SNMP authentication mechansim. Allegedly, the Avaya software accepts NULL SNMP community passwords, as well leaks information when handling partial community names that may be used to obtian full community names. This could result in an attacker gaining unauthorized SNMP access and could also aid in carrying out brute force and possibly other attacks.
It has been reported that Avaya Argent Office implements the use of a weak SNMP authentication mechansim. Allegedly, the Avaya software accepts NULL SNMP community passwords, as well leaks information when handling partial community names that may be used to obtian full community names. This could result in an attacker gaining unauthorized SNMP access and could also aid in carrying out brute force and possibly other attacks.
Exploit / POC
Avaya Argent Office SNMP Authentication Mechanism Weaknesses
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Avaya Argent Office SNMP Authentication Mechanism Weaknesses
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Avaya Argent Office SNMP Authentication Mechanism Weaknesses
References:
References:
- Argent Office Product Description (Avaya)
- Avaya Home Page (Avaya)