CVE-2008-3778

Currently unrated

Key Information:

Vendor
Avaya
Status
Sip Enablement Services
Vendor
CVE Published:
25 August 2008

Summary

The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service (messaging outage) or gain privileges via an update request.

References

http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/44585
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/30758
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.