CVE-2008-3777

Currently unrated

Key Information:

Vendor
Avaya
Status
Sip Enablement Services
Vendor
CVE Published:
25 August 2008

Summary

The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obtain login credentials by reading these logs.

References

http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm
x_refsource_CONFIRM
http://www.securityfocus.com/bid/30758
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/44586
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.