CVE-2008-5709: Input Validation
First published: Wed Dec 24 2008(Updated: )
Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the (1) Set Static Routes and (2) Backup History components.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Avaya Communication Manager | =5.0 | |
| Avaya Communication Manager | =4.0.1-sp15500 | |
| Avaya Communication Manager | =3.1.2 | |
| Avaya Communication Manager | =3.1.4-sp1 | |
| Avaya Communication Manager | =3.1.1 | |
| Avaya Communication Manager | =4.0 | |
| Avaya Communication Manager | =4.0.1-sp15215 | |
| Avaya Communication Manager | =5.0-sp1 | |
| Avaya Communication Manager | =5.0-sp2 | |
| Avaya Communication Manager | =4.0.3 | |
| Avaya Communication Manager | =3.1.3 | |
| Avaya Communication Manager | =4.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/31645
- http://www.voipshield.com/research-details.php?id=121
- http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm
- http://www.voipshield.com/research-details.php?id=122
- http://secunia.com/advisories/32204
- http://www.vupen.com/english/advisories/2008/2772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45749
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45747
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/avaya
- canonical/avaya communication manager
- version/avaya communication manager/5.0
- version/avaya communication manager/4.0.1-sp15500
- version/avaya communication manager/3.1.2
- version/avaya communication manager/3.1.4-sp1
- version/avaya communication manager/3.1.1
- version/avaya communication manager/4.0
- version/avaya communication manager/4.0.1-sp15215
- version/avaya communication manager/5.0-sp1
- version/avaya communication manager/5.0-sp2
- version/avaya communication manager/4.0.3
- version/avaya communication manager/3.1.3
- version/avaya communication manager/4.0.1