CVE-2008-6706
Severity Score
7.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts "subscriber table passwords," (4) a system utility that decrypts database passwords, and (5) a system utility that encrypts "subscriber table passwords."
Múltiples vulnerabilidades no especificadas en el interfase de gestión web en Avaya SIP Enablement Services (SES) v3.x y v4.0, como los usados en Avaya Communicatión Manager v3.1.x, permite a atacantes remotos conseguir (1)configuración de la aplicación del servidor, (2) configuración del servidor de bases de datos, incluidas claves cifradas, (3) utilidad del sistema que desencripta "claves de tablas de suscriptor", (4) utilidad del sistema que desencripta las claves de la base de datos, y (5) una utilidad del sistema que encripta "claves de tablas de suscriptor".
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-04-10 CVE Reserved
- 2009-04-10 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (14)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/46602 | Vdb Entry | |
| http://secunia.com/advisories/30751 | Third Party Advisory | |
| http://www.securityfocus.com/bid/29939 | Vdb Entry | |
| http://www.voipshield.com/research-details.php?id=81 | X_refsource_misc | |
| http://www.voipshield.com/research-details.php?id=82 | X_refsource_misc | |
| http://www.voipshield.com/research-details.php?id=83 | X_refsource_misc | |
| http://www.voipshield.com/research-details.php?id=84 | X_refsource_misc | |
| http://www.voipshield.com/research-details.php?id=85 | X_refsource_misc | |
| http://www.vupen.com/english/advisories/2008/1943/references | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/43382 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/43383 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/43387 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/43388 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm | 2017-08-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1 Search vendor "Avaya" for product "Communication Manager" and version "3.1" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.1 Search vendor "Avaya" for product "Communication Manager" and version "3.1.1" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.2 Search vendor "Avaya" for product "Communication Manager" and version "3.1.2" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.3 Search vendor "Avaya" for product "Communication Manager" and version "3.1.3" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | sp1 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | sp2 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.5 Search vendor "Avaya" for product "Communication Manager" and version "3.1.5" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.5 Search vendor "Avaya" for product "Communication Manager" and version "3.1.5" | sp0 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1 Search vendor "Avaya" for product "Communication Manager" and version "3.1" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.1 Search vendor "Avaya" for product "Communication Manager" and version "3.1.1" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.2 Search vendor "Avaya" for product "Communication Manager" and version "3.1.2" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.3 Search vendor "Avaya" for product "Communication Manager" and version "3.1.3" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | sp1 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | sp2 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.5 Search vendor "Avaya" for product "Communication Manager" and version "3.1.5" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.5 Search vendor "Avaya" for product "Communication Manager" and version "3.1.5" | sp0 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1 Search vendor "Avaya" for product "Communication Manager" and version "3.1" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.1 Search vendor "Avaya" for product "Communication Manager" and version "3.1.1" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.2 Search vendor "Avaya" for product "Communication Manager" and version "3.1.2" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.3 Search vendor "Avaya" for product "Communication Manager" and version "3.1.3" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | sp1 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | sp2 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.5 Search vendor "Avaya" for product "Communication Manager" and version "3.1.5" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 3.1.1 Search vendor "Avaya" for product "Sip Enablement Services" and version "3.1.1" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.5 Search vendor "Avaya" for product "Communication Manager" and version "3.1.5" | sp0 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 4.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "4.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1 Search vendor "Avaya" for product "Communication Manager" and version "3.1" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 4.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "4.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.1 Search vendor "Avaya" for product "Communication Manager" and version "3.1.1" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 4.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "4.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.2 Search vendor "Avaya" for product "Communication Manager" and version "3.1.2" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 4.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "4.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.3 Search vendor "Avaya" for product "Communication Manager" and version "3.1.3" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 4.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "4.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 4.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "4.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | sp1 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 4.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "4.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.4 Search vendor "Avaya" for product "Communication Manager" and version "3.1.4" | sp2 |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 4.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "4.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.5 Search vendor "Avaya" for product "Communication Manager" and version "3.1.5" | - |
Affected
|
| Avaya Search vendor "Avaya" | Sip Enablement Services Search vendor "Avaya" for product "Sip Enablement Services" | 4.0 Search vendor "Avaya" for product "Sip Enablement Services" and version "4.0" | - |
Affected
| in | Avaya Search vendor "Avaya" | Communication Manager Search vendor "Avaya" for product "Communication Manager" | 3.1.5 Search vendor "Avaya" for product "Communication Manager" and version "3.1.5" | sp0 |
Affected
|