Secunia Logo  
 Vulnerability InformationVulnerability ScanningCommunityBlog - new entry!Corporate InformationOnline ShopCustomer Login  
 Secunia AdvisoriesSecunia ResearchBinary Analysis  
Home > Vulnerability Information > Secunia Advisories > Avaya gzip Directory Traversal Vulnerability
Secunia Advisories
Advisories
Search
Advisories by Product
Advisories by Vendor
Historic Advisories
Mailing Lists
Report Vulnerability
Contact Form
Business Solutions Restricted
Partner Solutions Restricted
About


Secunia PSI WorldMap 		 
Avaya gzip Directory Traversal Vulnerability
Secunia Advisory: SA16643
Advisory Toolbox:
Issue ticket
Save in to-do list
Mark as handled
Exploit information
Download as PDF
Review actions
Add comment
Release Date: 2005-08-31
Popularity: 7,450 views

Critical:
Less critical
Impact: Security Bypass
Manipulation of data
Where: From remote
Solution Status: Unpatched

OS:Avaya Converged Communications Server (CCS) 2.x
Avaya Intuity LX
Avaya Modular Messaging 2.x
Avaya Network Messaging
Avaya S8XXX Media Servers
Secunia CVSS-2 Score: Available in Secunia business solutions

Subscribe: Instant alerts on relevant vulnerabilities


Advisory Content (Page 1 of 3)[ 1 ] [ 2 ] [ 3 ]

Description:
Avaya has acknowledged a vulnerability in gzip included in some products, which potentially can be exploited by malicious people to extract files to arbitrary directories on a user's system.

For more information:
SA15682

Change Page:
[ 1 ] [ 2 ] [ 3 ]


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

20th Nov, 2009
New advisories: 9
New vulnerabilities: 25
Updated advisories: 10

Moderately // 254 views
HP Operations Manager Unauthorised Access
Less // 256 views
Dovecot Insecure Directory Permissions Security Issue
Less // 294 views
IBM Rational Products Cross-Site Scripting Vulnerabilities
Highly // 295 views
KDE kdelibs Floating Point Number Processing Memory Corruption
Highly // 497 views
Opera Floating Point Number Processing Memory Corruption
Highly // 303 views
SUSE update for java-1_6_0-sun
Less // 311 views
PEAR Mail Sendmail "Mail::Send()" Argument Injection Vulnerability
Moderately // 624 views
PHP Multiple Vulnerabilities
Not // 554 views
Cisco VPN Client "cvpnd" Service Local Denial of Service

19th Nov, 2009
New advisories: 23
New vulnerabilities: 35
Updated advisories: 29

Less // 315 views
Drupal Gallery Assist Module Script Insertion Vulnerability

Solutions | More...  

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Kaspersky Anti-Virus 2010 klavemu.kdl Denial of Service Vulnerability // 36 views
2. Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability // 32 views
3. Adobe Flash Player Multiple Vulnerabilities // 21 views
4. Sun Java JDK / JRE Multiple Vulnerabilities // 18 views
5. Microsoft Windows Win32k Kernel-Mode Driver Multiple Vulnerabilities // 17 views
6. PHP Multiple Vulnerabilities // 16 views
7. Adobe Reader/Acrobat Multiple Vulnerabilities // 12 views
8. Opera Floating Point Number Processing Memory Corruption // 12 views
9. Google Chrome Cross-Origin Resource Sharing Security Bypass // 12 views
10. Cisco VPN Client "cvpnd" Service Local Denial of Service // 11 views



Contact | Terms & Conditions and Copyright | Report Vulnerability | Press | Jobs (open positions) | About Secunia
Copyright Secunia 2002-2009