Skip to content

Avaya vulnerabilities

Products

Show 10 moreShow less

Newest

avaya s8300, s8500, s8700 +1 more +3 moreCross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM)...CVE-2007-13674.3 MediumMarch 9, 2007
busybox, avaya aura application enablement services, aura sip enablement services +2 more +4 moreBusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local...CVE-2006-1058Fix available5.5 MediumApril 4, 2006
avaya csu 5000, vsu 100, vsu 10000 +2 more +4 moreThe Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000,...CVE-2006-07185.0 MediumFebruary 15, 2006
avaya vpnremoteAvaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows...CVE-2005-27622.1 LowDecember 31, 2005
avaya modular messaging message storage serverPOP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows...CVE-2005-44715.0 MediumDecember 22, 2005
proxim ap-2000, ap-4000, ap-600 +7 more +9 moreWireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and...CVE-2005-32537.5 HighDecember 16, 2005
avaya tn2602ap ip media resource 320 circuit packMemory leak in Avaya TN2602AP IP Media Resource 320 circuit pack before vintage 9 firmware allows...CVE-2005-39897.8 HighDecember 4, 2005
avaya libsafeRace condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows...CVE-2005-1125Public exploit5.1 MediumApril 16, 2005
avaya ip office phone manager, ip soft phone +1 moreThe Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive...CVE-2005-0506Public exploit5.0 MediumFebruary 22, 2005
linux kernel, avaya converged communications server, intuity audix +12 more +14 moreThe 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not...CVE-2005-00032.1 LowJanuary 20, 2005
conectiva linux, linux kernel, avaya converged communications server +14 more +16 moreRace condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux...CVE-2004-1235Public exploit6.2 MediumJanuary 20, 2005
libtiff, apple mac os x, mac os x server +15 more +17 moreInteger overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows...CVE-2004-1307Fix available7.5 HighDecember 21, 2004
microsoft internet explorer, avaya definity one media server, ip600 media servers +4 more +6 moreHeap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary...CVE-2004-1050Public exploitEPSS 67.1%10.0 HighNovember 18, 2004
microsoft ie, internet explorer, avaya definity one media server +4 more +6 moreInternet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to...CVE-2004-0842Public exploitEPSS 56.6%7.5 HighSeptember 14, 2004
microsoft internet explorer, avaya definity one media server, ip600 media servers +4 more +6 moreInternet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events...CVE-2004-0841Public exploitEPSS 48.7%5.0 MediumSeptember 14, 2004
sun dtmail, solaris, avaya call management system server +1 more +3 moreFormat string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain...CVE-2004-08004.6 MediumAugust 24, 2004
microsoft ie, internet explorer, windows xp +15 more +17 moreInternet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote...CVE-2004-0839EPSS 34.0%5.0 MediumAugust 18, 2004
avaya cvlan, redhat enterprise linux, enterprise linux desktop +1 more +3 moreMultiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote...CVE-2004-0494Fix available7.5 HighAugust 5, 2004
php, avaya converged communications server, integrated management +5 more +7 moreThe strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0)...CVE-2004-0595Public exploitEPSS 45.2%6.8 MediumJuly 16, 2004
php, avaya converged communications server, debian linux +3 more +5 moreThe memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain...CVE-2004-0594Public exploitEPSS 54.9%5.1 MediumJuly 16, 2004
microsoft outlook express, avaya definity one media server, ip600 media servers +2 more +4 moreMicrosoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application...CVE-2004-0215EPSS 15.6%5.0 MediumJuly 14, 2004
microsoft windows 2000, windows nt, avaya definity one media server +5 more +7 moreStack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer...CVE-2004-0212Public exploitEPSS 63.5%10.0 HighJuly 14, 2004
microsoft internet information server, avaya definity one media server, ip600 media servers +2 more +4 moreBuffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute...CVE-2004-0205EPSS 24.5%7.2 HighJuly 14, 2004
microsoft windows 98, avaya definity one media server, ip600 media servers +8 more +10 moreHeap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98...CVE-2004-0201EPSS 45.3%10.0 HighJuly 14, 2004
apache http server, avaya converged communications server, s8300 +4 more +6 moreThe ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a...CVE-2004-0493Public exploitFix availableEPSS 84.8%6.4 MediumJune 30, 2004
conectiva linux, linux kernel, avaya converged communications server +13 more +15 moreMultiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges...CVE-2004-04957.2 HighJune 23, 2004
conectiva linux, linux kernel, avaya converged communications server +13 more +15 moreLinux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system...CVE-2004-0554Public exploit2.1 LowJune 15, 2004
openssl, 4d webstar, apple mac os x +61 more +63 moreThe SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos...CVE-2004-0112Fix availableEPSS 10.4%5.0 MediumMarch 18, 2004
openssl, 4d webstar, apple mac os x +62 more +64 moreOpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote...CVE-2004-0081Fix available5.0 MediumMarch 17, 2004
openssl, 4d webstar, apple mac os x +62 more +64 moreThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows...CVE-2004-0079Fix available7.5 HighMarch 17, 2004
apache http server, apple apache mod digest apple, avaya communication manager +10 more +12 moremod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the...CVE-2004-10827.5 HighFebruary 3, 2004
hp hp-ux, avaya predictive dialer system +1 moreBuffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain...CVE-2003-1359Public exploit7.2 HighDecember 31, 2003
avaya cajun p550, cajun p550r, cajun p580 +2 more +4 moreAvaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts...CVE-2002-12297.5 HighOctober 21, 2002
avaya cajun m770-atm, cajun p130, cajun p330 +2 moreAn undocumented SNMP read/write community string ('NoGaH$@!') in Avaya P330, P130, and M770-ATM...CVE-2002-14487.5 HighJuly 8, 2002
avaya libsafeThe printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing...CVE-2002-01764.6 MediumApril 22, 2002
avaya libsafelibsafe 2.0-11 and earlier allows attackers to bypass protection against format string...CVE-2002-01754.6 MediumApril 22, 2002
kernel util-linux, avaya cvlan, integrated management suit +4 more +6 morescript command in the util-linux package before 2.11n allows local users to overwrite arbitrary...CVE-2001-1494Fix available5.5 MediumDecember 31, 2001
avaya argent officeAvaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string...CVE-2001-12627.5 HighAugust 7, 2001
avaya argent officeAvaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate...CVE-2001-12615.0 MediumAugust 7, 2001
avaya argent officeAvaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote...CVE-2001-126010.0 HighAugust 7, 2001
avaya argent officeAvaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets...CVE-2001-1259Public exploit5.0 MediumAugust 7, 2001