Avaya Products Microsoft Windows Multiple Vulnerabilities - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Avaya Products Microsoft Windows Multiple Vulnerabilities

Secunia Advisory:	SA18064
Release Date:	2005-12-15

Critical:	Highly critical
Impact:	Security Bypass Exposure of sensitive information Privilege escalation System access
Where:	From remote
Solution Status:	Vendor Workaround

OS:	Avaya Modular Messaging 2.x Avaya S8XXX Media Servers Avaya Unified Communication Center (UCC) 2.x


CVE reference:	CVE-2005-1790 (Secunia mirror) CVE-2005-2827 (Secunia mirror) CVE-2005-2829 (Secunia mirror) CVE-2005-2830 (Secunia mirror) CVE-2005-2831 (Secunia mirror)



Description: Avaya has acknowledged some vulnerabilities in various products, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to view potentially sensitive information, to trick users into downloading and executing arbitrary programs, and to compromise a user's system. For more information: SA15368 SA15821 The following products are affected: * Unified Communications Center (UCC) - S3400 (All versions) * Modular Messaging - Messaging Application Server (MAS) (All versions) * S8100/DefinityOne/IP600 Media Servers (All versions) Solution: The vendor recommends applying patches from Microsoft (see Secunia Advisory links). Original Advisory: http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf Other References: SA15368: http://secunia.com/advisories/15368/ SA15821: http://secunia.com/advisories/15821/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

118 Related Secunia Security Advisories, displaying 10

1. Avaya Products Libxml2 UTF-8 Parsing Denial of Service

2. Avaya Products util-linux Privilege Escalation Vulnerability

3. Avaya Products Perl Regular Expressions Unicode Data Buffer Overflow

4. Avaya Products Samba "send_mailslot()" Buffer Overflow

5. Avaya Products libpng Denial of Service Vulnerability

6. Avaya Products CUPS "StreamPredictor" Multiple Vulnerabilities

7. Avaya Products Cyrus SASL DIGEST-MD5 Pre-Authentication Denial of Service

8. Avaya Products Qt QTextEdit Error Message Handling Format String Vulnerability

9. Avaya Products BIND Predictable DNS Query IDs Vulnerability

10. Avaya Products Apache Multi-Processing Module Denial of Service

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Mozilla Firefox Multiple Vulnerabilities

2.	Opera for Windows Unspecified Code Execution

3.	VLC Media Player WAV Processing Integer Overflow

4.	PCRE pcre_compile.c Buffer Overflow Vulnerability

5.	GNOME Glib PCRE pcre_compile.c Buffer Overflow Vulnerability

6.	Opera Canvas Functions Information Disclosure

7.	Internet Explorer 7 Frame Location Handling Vulnerability

8.	Mozilla Thunderbird Multiple Vulnerabilities

9.	UnixWare ReliantHA Privilege Escalation Vulnerabilities

10.	Fedora update for glib2