Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

avaya sip enablement services - vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2006-1058
BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.
Busybox Busybox 1.1.1Avaya Message NetworkingAvaya Aura Sip Enablement ServicesAvaya Aura Application Enablement Services 4.01Avaya Aura Application Enablement Services 4.1Avaya Messaging Storage Server
5.2
CVSSv2
CVE-2007-1491
Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.
Avaya S8300Avaya S8700Avaya Sip Enablement ServicesAvaya S8500
2.1
CVSSv2
CVE-2008-3777
The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obta...
Avaya Sip Enablement Services 5.0Avaya Communication Manager 5.0
7.5
CVSSv2
CVE-2008-3778
The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote malicious users to ...
Avaya Sip Enablement Services 5.0Avaya Communication Manager 5.0
9
CVSSv2
CVE-2008-6708
Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of...
Avaya Communication Manager 3.1.3Avaya Communication Manager 4.0.3Avaya Communication Manager 3.1.1Avaya Sip Enablement Services 3.0Avaya Communication Manager 4.0Avaya Communication Manager 3.1.5Avaya Communication Manager 4.0.1Avaya Communication Manager 3.1Avaya Communication Manager 3.1.4Avaya Communication Manager 3.1.2
7.2
CVSSv2
CVE-2008-2812
The Linux kernel prior to 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio...
Linux Linux KernelCanonical Ubuntu Linux 6.06Canonical Ubuntu Linux 7.04Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 8.04Novell Linux Desktop 9Opensuse Opensuse 11.0Opensuse Opensuse 10.3Suse Suse Linux Enterprise Server 10Suse Suse Linux Enterprise Desktop 10Debian Debian Linux 4.0Avaya Message Networking 3.1Avaya Sip Enablement Services 4.0Avaya Messaging Storage Server 4.0Avaya Proactive Contact 4.0Avaya Meeting Exchange 5.0Avaya Expanded Meet-me ConferencingAvaya Intuity Audix Lx 2.0Avaya Sip Enablement Services -Avaya Communication Manager
6.6
CVSSv2
CVE-2009-3939
The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and previous versions has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
Linux Linux KernelRedhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 5.0Redhat Virtualization 5Redhat Enterprise Linux Eus 5.4Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 6.06Debian Debian Linux 5.0Avaya Aura System Manager 6.0Avaya Aura System Manager 5.2Avaya Aura Communication Manager 5.2Avaya Voice Portal 5.0Avaya Aura System Platform 1.1Avaya Aura Session Manager 1.1Avaya Aura Session Manager 5.2Avaya Aura Sip Enablement Services 5.2Avaya Aura Application Enablement Services 5.2Avaya Aura Application Enablement Services 5.2.1
6.8
CVSSv2
CVE-2008-6575
Unspecified vulnerability in the SIP server in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote authenticated users to cause a denial of service (resource consumption) via unknown vectors.
Avaya Communication Manager 3.1.5Avaya Communication Manager 4.0Avaya Communication Manager 4.0.1Avaya Communication Manager 3.1.3Avaya Communication Manager 3.1.1Avaya Communication Manager 3.1Avaya Communication Manager 3.1.2Avaya Communication Manager 3.1.4Avaya Communication Manager 4.0.3
9
CVSSv2
CVE-2008-6709
Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of "loca...
Avaya Sip Enablement Services 3.0Avaya Sip Enablement Services 3.1Avaya Sip Enablement Services 3.1.1Avaya Sip Enablement Services 4.0Avaya Communication Manager 3.1Avaya Communication Manager 3.1.2Avaya Communication Manager 3.1.4Avaya Communication Manager 3.1.5Avaya Communication Manager 3.1.3Avaya Communication Manager 3.1.1
7.5
CVSSv2
CVE-2008-6574
Unspecified vulnerability in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote malicious users to gain privileges and cause a denial of service via unknown vectors related to reuse of valid credentials.
Avaya Communication Manager 3.1Avaya Communication Manager 3.1.1Avaya Communication Manager 4.0Avaya Communication Manager 4.0.1Avaya Communication Manager 3.1.4Avaya Communication Manager 4.0.3Avaya Communication Manager 3.1.5Avaya Communication Manager 3.1.2Avaya Communication Manager 3.1.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook