First published: Tue Aug 07 2001(Updated: )
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Avaya Argent Office | =2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-1261 has been rated as a medium severity vulnerability due to the potential for unauthorized changes to hold music.
CVE-2001-1261 allows remote attackers to exploit the vulnerability by spoofing a legitimate server's response to a TFTP broadcast.
To mitigate CVE-2001-1261, ensure that appropriate authentication and validation measures are in place for TFTP broadcasts.
CVE-2001-1261 affects Avaya Argent Office version 2.1.
Yes, CVE-2001-1261 can lead to unauthorized access by allowing attackers to change the hold music, potentially disrupting service.