1. CVE-Search
  2. CVE-2008-6706
ID CVE-2008-6706
Summary Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts "subscriber table passwords," (4) a system utility that decrypts database passwords, and (5) a system utility that encrypts "subscriber table passwords."
References
Vulnerable Configurations
  • cpe:2.3:a:avaya:sip_enablement_services:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:avaya:sip_enablement_services:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:sip_enablement_services:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:avaya:sip_enablement_services:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:sip_enablement_services:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:avaya:sip_enablement_services:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:sip_enablement_services:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:avaya:sip_enablement_services:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:avaya:communication_manager:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:avaya:communication_manager:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:avaya:communication_manager:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:avaya:communication_manager:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:avaya:communication_manager:3.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*
    cpe:2.3:a:avaya:communication_manager:3.1.4:sp1:*:*:*:*:*:*
  • cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*
    cpe:2.3:a:avaya:communication_manager:3.1.4:sp2:*:*:*:*:*:*
  • cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:avaya:communication_manager:3.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*
    cpe:2.3:a:avaya:communication_manager:3.1.5:sp0:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 17-08-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:N/A:N
refmap via4
bid 29939
confirm http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm
misc
osvdb 46602
secunia 30751
vupen ADV-2008-1943
xf
  • avaya-ses-databasepassword-info-disclosure(43387)
  • avaya-ses-databaseserver-info-disclosure(43388)
  • avaya-ses-passwordencryption-info-disclosure(43383)
  • avaya-ses-tablepasswords-info-disclosure(43382)
Last major update 17-08-2017 - 01:29
Published 10-04-2009 - 22:00
Last modified 17-08-2017 - 01:29
Back to Top