CVE-2007-1491 - Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections fro

CVE-2007-1491

Summary

Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.

References

Vulnerable Configurations

cpe:2.3:a:avaya:sip_enablement_services:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:sip_enablement_services:*:*:*:*:*:*:*:*
cpe:2.3:h:avaya:s8300:-:*:*:*:*:*:*:*
cpe:2.3:h:avaya:s8300:-:*:*:*:*:*:*:*
cpe:2.3:h:avaya:s8500:-:*:*:*:*:*:*:*
cpe:2.3:h:avaya:s8500:-:*:*:*:*:*:*:*
cpe:2.3:h:avaya:s8700:-:*:*:*:*:*:*:*
cpe:2.3:h:avaya:s8700:-:*:*:*:*:*:*:*

CVSS

Base:	5.2 (as of 05-09-2008 - 21:20)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
ADJACENT_NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:A/AC:L/Au:S/C:P/I:P/A:P

refmap via4

confirm	http://support.avaya.com/elmodocs2/security/ASA-2007-051.htm
osvdb	33346
secunia	24434

Last major update

05-09-2008 - 21:20

Published

16-03-2007 - 22:19

Last modified

05-09-2008 - 21:20