Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

avaya aura system manager vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2010-2492
Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel prior to 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors.
Linux Linux KernelVmware Esx 4.1Vmware Esx 4.0Avaya Aura System Manager 6.0Avaya Aura System Manager 5.2Avaya Aura Communication Manager 5.2Avaya Aura System Platform 1.1Avaya Aura System Platform 6.0Avaya Aura System Manager 6.1Avaya Aura System Manager 6.1.1Avaya Aura Session Manager 1.1Avaya Aura Session Manager 5.2Avaya Aura Session Manager 6.0Avaya Aura Presence Services 6.1Avaya Aura Presence Services 6.1.1Avaya Aura Presence Services 6.0Avaya Iq 5.1Avaya Iq 5.0Avaya Aura Voice Portal 5.0Avaya Aura Voice Portal 5.1
6.4
CVSSv2
CVE-2010-2943
The xfs implementation in the Linux kernel prior to 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but wer...
Linux Linux KernelCanonical Ubuntu Linux 10.10Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 6.06Vmware Esx 4.1Vmware Esx 4.0Avaya Aura System Manager 6.0Avaya Aura System Manager 5.2Avaya Aura Communication Manager 5.2Avaya Aura System Platform 1.1Avaya Aura System Platform 6.0Avaya Aura System Manager 6.1Avaya Aura System Manager 6.1.1Avaya Aura Session Manager 1.1Avaya Aura Session Manager 5.2Avaya Aura Session Manager 6.0Avaya Aura Presence Services 6.1Avaya Aura Presence Services 6.1.1Avaya Aura Presence Services 6.0Avaya Iq 5.1Avaya Iq 5.0
7.2
CVSSv2
CVE-2010-2798
The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel prior to 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibl...
Linux Linux KernelVmware Esx 4.1Vmware Esx 4.0Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 6.06Debian Debian Linux 5.0Avaya Aura System Manager 6.0Avaya Aura System Manager 5.2Avaya Aura Communication Manager 5.2Avaya Voice Portal 5.1Avaya Voice Portal 5.0Avaya Aura System Platform 1.1Avaya Aura System Platform 6.0Avaya Aura System Manager 6.1Avaya Aura System Manager 6.1.1Avaya Aura Session Manager 1.1Avaya Aura Session Manager 5.2Avaya Aura Session Manager 6.0
5.5
CVSSv2
CVE-2020-7032
An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 up to and includin...
Avaya Aura System ManagerAvaya Weblm
2.1
CVSSv2
CVE-2010-2942
The actions implementation in the network queueing functionality in the Linux kernel prior to 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory...
Linux Linux Kernel 2.6.36Linux Linux KernelCanonical Ubuntu Linux 10.10Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 6.06Opensuse Opensuse 11.1Opensuse Opensuse 11.3Suse Suse Linux Enterprise Server 11Suse Suse Linux Enterprise Desktop 11Suse Suse Linux Enterprise Server 10Suse Suse Linux Enterprise Desktop 10Avaya Aura System Manager 6.0Avaya Aura System Manager 5.2Avaya Aura Communication Manager 5.2Avaya Voice Portal 5.1Avaya Voice Portal 5.0Avaya Aura System Platform 1.1Avaya Aura System Platform 6.0Avaya Aura System Manager 6.1
6.8
CVSSv2
CVE-2020-7029
A Cross-Site Request Forgery (CSRF) vulnerability exists in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote malicious user to perform Web administration actions wi...
Avaya Aura Communication ManagerAvaya Aura MessagingAvaya Aura Messaging 7.1
6.6
CVSSv2
CVE-2009-3939
The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and previous versions has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
Linux Linux KernelRedhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 5.0Redhat Virtualization 5Redhat Enterprise Linux Eus 5.4Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 6.06Debian Debian Linux 5.0Avaya Aura System Manager 6.0Avaya Aura System Manager 5.2Avaya Aura Communication Manager 5.2Avaya Voice Portal 5.0Avaya Aura System Platform 1.1Avaya Aura Session Manager 1.1Avaya Aura Session Manager 5.2Avaya Aura Sip Enablement Services 5.2Avaya Aura Application Enablement Services 5.2Avaya Aura Application Enablement Services 5.2.1
7.2
CVSSv2
CVE-2018-15611
A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version before 7.1.3.1.
Avaya Aura Communication Manager
6
CVSSv2
CVE-2018-6635
System Manager in Avaya Aura prior to 7.1.2 does not properly use SSL in conjunction with authentication, which allows remote malicious users to bypass intended Remote Method Invocation (RMI) restrictions, aka SMGR-26896.
Avaya Aura
7.2
CVSSv2
CVE-2011-1229
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a...
Microsoft Windows 2003 Server -Microsoft Windows 7 -Microsoft Windows Server 2003 -Microsoft Windows Server 2008 -Microsoft Windows Server 2008 R2Microsoft Windows Vista -Microsoft Windows Xp -Avaya Agent AccessAvaya Aura Conferencing Standard Edition 6.0.0Avaya Basic Call Management System Reporting DesktopAvaya Call Management Server SupervisorAvaya CallpilotAvaya Callvisor Asai LanAvaya Communication Server 1000 Telephony ManagerAvaya Computer TelephonyAvaya Contact Center ExpressAvaya Customer Interaction ExpressAvaya Enterprise ManagerAvaya Integrated ManagementAvaya Interaction CenterAvaya Ip AgentAvaya Ip Softphone
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook