Vulnerability CVE-2007-1491
Published: 2007-03-16   Modified: 2012-02-12

Description:
Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.

CVSS2 => (AV:A/AC:L/Au:S/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.2/10
6.4/10
5.1/10
Exploit range
Attack complexity
Authentication
Adjacent network
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Avaya -> Sip enablement services 
Avaya -> S8300 
Avaya -> S8500 
Avaya -> S8700 

 References:
http://support.avaya.com/elmodocs2/security/ASA-2007-051.htm
http://secunia.com/advisories/24434
http://www.osvdb.org/33346
Copyright 2024, cxsecurity.com

 

Back to Top