CVE-2007-1490 | BDVDB-2026-22953 Detail

Description#

Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors (aka "shell command injection").

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/24434
http://www.osvdb.org/33300
http://support.avaya.com/elmodocs2/security/ASA-2007-052.htm

Exploit#

No public exploit known

History#

Version 12007-03-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.