CVE-2008-6706 | BDVDB-2026-36082 Detail
Description#
Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts "subscriber table passwords," (4) a system utility that decrypts database passwords, and (5) a system utility that encrypts "subscriber table passwords."
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.vupen.com/english/advisories/2008/1943/references
- http://secunia.com/advisories/30751
- http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43382
- http://www.voipshield.com/research-details.php?id=81
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43388
- http://www.voipshield.com/research-details.php?id=83
- http://www.voipshield.com/research-details.php?id=82
- http://osvdb.org/46602
- http://www.voipshield.com/research-details.php?id=85
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43387
- http://www.voipshield.com/research-details.php?id=84
- http://www.securityfocus.com/bid/29939
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43383
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.