VUPEN Security - Avaya Communication Manager Perl Double Free Vulnerability / Exploit (Security Advisories)

	Contact \| Site en Français

Vulnerabilities & Threats

VUPEN Security Advisories

Linux Security Advisories

Threat Watch Blog

Zero-Day Monitor

Search Engine

Mailing List & RSS

>> Avaya Communication Manager Perl Double Free Vulnerability

Title : Avaya Communication Manager Perl Double Free Vulnerability
VUPEN ID : VUPEN/ADV-2008-2265
CVE ID : CVE-2008-1927
Rated as : Moderate Risk

Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2008-08-01

Technical Description

A vulnerability has been identified in Avaya Communication Manager, which could be exploited by attackers to cause a denial of service or potentially execute arbitrary code. This issue is caused by an error in Perl. For additional information, see : VUPEN/ADV-2007-3724

Affected Products

Avaya Communication Manager versions 2.x
Avaya Communication Manager versions 3.x
Avaya Communication Manager versions 4.x

Solution

Avaya recommends that customers restrict local and network access to the server.

References

http://www.vupen.com/english/advisories/2008/2265
http://support.avaya.com/elmodocs2/security/ASA-2008-317.htm

ChangeLog

2008-08-01 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.

Latest News

>> 2009-07-06