NVD

Id
2969  
Name
CVE-2008-3081  
Description
Multiple unspecified "input validation" vulnerabilities in the Web management interface (aka Messaging Administration interface) in Avaya Message Storage Server (MSS) 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user vexvm via vectors related to (1) SFTP Remote Store configuration; (2) remote FTP storage settings; (3) name server lookup; (4) pinging another host; (5) TCP/IP Networking parameter configuration; (6) the external hosts configuration main page; (7) adding and changing external hosts; (8) Windows domain parameter configuration; (9) date, time, and NTP server configuration; (10) alarm settings; (11) the command line history form; (12) the maintenance form; and (13) the server events form.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-08  
Modified Date
2011-03-07  
Seq
2008-3081  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18702 2969 CVE-2008-3081 http://support.avaya.com/elmodocs2/security/ASA-2008-269.htm  View
18703 2969 CVE-2008-3081 29938  View
18704 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=100  View
18705 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=101  View
18706 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=102  View
18707 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=103  View
18708 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=104  View
18709 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=92  View
18710 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=93  View
18711 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=94  View
18712 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=95  View
18713 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=96  View
18714 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=97  View
18715 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=98  View
18716 2969 CVE-2008-3081 http://www.voipshield.com/research-details.php?id=99  View
18717 2969 CVE-2008-3081 ADV-2008-1945  View
18718 2969 CVE-2008-3081 avaya-mss-tcpip-command-execution(43422)  View
18719 2969 CVE-2008-3081 avaya-mss-nameserver-command-execution(43423)  View
18720 2969 CVE-2008-3081 avaya-mss-ftpstorage-command-execution(43424)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47922 JVNDB-2008-003232 Avaya MSS の Web 管理インターフェースにおける任意のコマンドを実行される脆弱性 Avaya Message Storage Server (MSS) の Web 管理インターフェースには、以下に関連する処理に不備があるため、任意のコマンドを実行される脆弱性が存在します。 CVE-2008-3081 33194 CVE-2008-3081 2969 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003232.html 2008-06-25 2012-06-26 View