Avaya Communication Manager '/auth-cgi-bin/distUpgReq' Command Injection Vulnerability

Bugtraq ID:	98742
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 08 2017 12:00AM
Updated:	Apr 08 2017 12:00AM
Credit:	Unknown
Vulnerable:
Not Vulnerable:

Avaya Communication Manager '/auth-cgi-bin/distUpgReq' Command Injection Vulnerability

Avaya Communication Manager is prone to a remote command-injection vulnerability.

Successful exploit allows an attacker to inject and execute arbitrary commands with ROOT privileges in context of the affected application.

Avaya Communication Manager S8710-013-00.0.340.3 is vulnerable; other versions may also be affected.

Avaya Communication Manager '/auth-cgi-bin/distUpgReq' Command Injection Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Avaya Communication Manager '/auth-cgi-bin/distUpgReq' Command Injection Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Avaya Communication Manager '/auth-cgi-bin/distUpgReq' Command Injection Vulnerability

References:

• Avaya Home Page (Avaya)
  
• NSA SHADOWBROKERS LEAK: ANALYZING 'EPICHERO' (Infobytesec)
  
• user.tool.epichero.COMMON (EPICHERO)
  
• Avaya.ShadowBroker.EPICHERO.Remote.Code.Execution (Fortinet)