ByteOS Network

NVD Vulnerability Details :

CVE-2007-1490

Analyzed

Source-cve@mitre.org

Published At-16 Mar, 2007 | 22:19

Updated At-05 Sep, 2008 | 21:20

Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors (aka "shell command injection").

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.0	MEDIUM	AV:N/AC:M/Au:S/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 6.0

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:S/C:P/I:P/A:P

CPE Matches

Avaya LLC

>>communication_manager>>Versions up to 3.1.3(inclusive)

cpe:2.3:a:avaya:communication_manager:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/24434	cve@mitre.org	N/A
http://support.avaya.com/elmodocs2/security/ASA-2007-052.htm	cve@mitre.org	Patch Vendor Advisory
http://www.osvdb.org/33300	cve@mitre.org	N/A

Hyperlink: http://secunia.com/advisories/24434

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2007-052.htm

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.osvdb.org/33300

Source: cve@mitre.org

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History