|
Avaya Products Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA13880
|
|
|
Release Date:
|
2005-01-17
|
|
Last Update:
|
2005-01-28
|
|
Popularity:
|
7,331 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Security Bypass
Spoofing
Privilege escalation
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| OS: | Avaya Converged Communications Server (CCS) 2.x
Avaya Intuity LX
Avaya MN100
Avaya Modular Messaging 2.x
Avaya Network Routing (ANR) 2.x
Avaya S8XXX Media Servers
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2003-0987
CVE-2004-0885
CVE-2004-0940
CVE-2004-0968
|
|
Description:
Avaya has acknowledged multiple vulnerabilities in various products, which potentially can be exploited to gain unauthorised access to other websites, bypass certain security restrictions, or gain escalated privileges.
1) A vulnerability in glibc can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.
For more information:
SA12930
This vulnerability affects the following products:
* Avaya S8710/S8700/S8500/S8300 (All versions)
* Avaya Converged Communication Server (All versions)
* Avaya MN100 (All versions)
* Avaya Intuity LX (1.1-5.x)
* Avaya Modular Messaging (All versions)
* Avaya Network Routing (All versions)
2) Various vulnerabilities in Apache and mod_ssl can be exploited to gain escalated privileges, unauthorised access to web sites, or bypass certain security restrictions.
For more information:
SA10789
SA12787
SA12898
These vulnerabilities affect the following products:
* Avaya MN100 (All versions)
* Avaya Intuity LX (1.1-5.x)
* Avaya Modular Messaging MSS (All versions)
* Avaya Network Routing (All versions)
* Avaya Communication Manager (All versions)
Solution:
The vendor recommends that traffic is filtered to the affected services and only trusted users are granted local access.
Changelog:
2005-01-28: Updated advisory.
Original Advisory:
Avaya:
http://support.avaya.com/elmodocs2/security/ASA-2005-011_RHSA-2004-586.pdf
http://support.avaya.com/elmodocs2/security/ASA-2005-010_RHSA-2004-600.pdf
Other References:
SA10789:
http://secunia.com/advisories/10789/
SA12787:
http://secunia.com/advisories/12787/
SA12898:
http://secunia.com/advisories/12898/
SA12930:
http://secunia.com/advisories/12930/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
