Input Validation Vulnerabilities in Avaya Messaging Administration Interface

CVE-2008-3081

Summary

The Avaya Message Storage Server features multiple unspecified input validation vulnerabilities within its Web management and Messaging Administration interface. These flaws permit remote authenticated administrators to execute arbitrary commands as the user vexvm. Attack vectors associated with the vulnerabilities include configurations for SFTP Remote Store and FTP storage settings, name server lookups, networking parameters, and several operational forms related to external host management, alarm settings, and system time configurations. Exploiting these vulnerabilities may allow unauthorized command execution, posing significant security risks to affected systems.

References