Remote Code Manipulation in Avaya Argent Office by Spoofing

CVE-2001-1261

Summary

Avaya Argent Office 2.1 is susceptible to a vulnerability where remote attackers can manipulate the hold music by spoofing responses from a legitimate server. By leveraging TFTP broadcasts, attackers can redirect the request to provide malicious HoldMusic files, effectively altering the audio that callers hear while on hold.

References