CVE-2008-5709 Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated u...
HighCVSS 9.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya communication manager | = 3.1.1 | No fix listed |
| avaya communication manager | = 3.1.2 | No fix listed |
| avaya communication manager | = 3.1.3 | No fix listed |
| avaya communication manager | = 3.1.4-sp1 | No fix listed |
| avaya communication manager | = 4.0 | No fix listed |
| avaya communication manager | = 4.0.1 | No fix listed |
| avaya communication manager | = 4.0.1-sp15215 | No fix listed |
| avaya communication manager | = 4.0.1-sp15500 | No fix listed |
| avaya communication manager | = 4.0.3 | No fix listed |
| avaya communication manager | = 5.0 | No fix listed |
| avaya communication manager | = 5.0-sp1 | No fix listed |
| avaya communication manager | = 5.0-sp2 | No fix listed |
References
- 32204 third-party-advisory vendor-advisory
- support.avaya.com vendor-advisory
- 31645 vdb-entry
- www.voipshield.com
- www.voipshield.com
- ADV-2008-2772 vdb-entry
- avaya-cm-backuphistory-cmd-execution(45747) vdb-entry
- avaya-cm-setstatic-command-execution(45749) vdb-entry