NVD

Id
6438  
Name
CVE-2008-6707  
Description
The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via (1) the certificate installation utility, (2) unspecified scripts in the objects folder, (3) an "unnecessary default application," (4) unspecified scripts in the states folder, (5) an unspecified "default application" that lists server configuration, and (6) "full system help."  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-03  
Published
2009-04-10  
Modified Date
2009-09-09  
Seq
2008-6707  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
37540 6438 CVE-2008-6707 http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm  View
37541 6438 CVE-2008-6707 29939  View
37542 6438 CVE-2008-6707 http://www.voipshield.com/research-details.php?id=86  View
37543 6438 CVE-2008-6707 http://www.voipshield.com/research-details.php?id=87  View
37544 6438 CVE-2008-6707 http://www.voipshield.com/research-details.php?id=88  View
37545 6438 CVE-2008-6707 http://www.voipshield.com/research-details.php?id=89  View
37546 6438 CVE-2008-6707 http://www.voipshield.com/research-details.php?id=90  View
37547 6438 CVE-2008-6707 http://www.voipshield.com/research-details.php?id=91  View
37548 6438 CVE-2008-6707 ADV-2008-1943  View
37549 6438 CVE-2008-6707 avaya-ses-objectsfolder-code-execution(43381)  View
37550 6438 CVE-2008-6707 avaya-ses-certificate-info-disclosure(43384)  View
37551 6438 CVE-2008-6707 avaya-ses-application-unauth-access(43389)  View
37552 6438 CVE-2008-6707 avaya-ses-statesfolder-code-execution(43393)  View
37553 6438 CVE-2008-6707 avaya-ses-application-info-disclosure(43394)  View
37554 6438 CVE-2008-6707 avaya-ses-help-information-disclosure(43395)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48506 JVNDB-2008-003816 Avaya SES の Web 管理インターフェースにおける重要な情報を取得される脆弱性 Avaya SIP Enablement Services (SES) の Web 管理インターフェースには、Avaya Communication Manager とともに使用される際、特定の機能の認証を実行しないため、重要な情報を取得される、および制限された機能にアクセスされる脆弱性が存在します。 CVE-2008-6707 36820 CVE-2008-6707 6438 6.4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003816.html 2008-06-25 2012-06-26 View