Vulnerabilities > Avaya > Low

DATE CVE VULNERABILITY TITLE RISK
2008-08-25 CVE-2008-3777 Information Exposure vulnerability in Avaya Communication Manager and SIP Enablement Services
The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obtain login credentials by reading these logs.
local
low complexity
avaya CWE-200
2.1
2005-12-31 CVE-2005-2762 Local Security vulnerability in Vpnremote
Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials.
local
low complexity
avaya
2.1
2004-08-06 CVE-2004-0554 Local Denial Of Service vulnerability in Linux Kernel Floating Point Exception Handler
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.
local
low complexity
avaya gentoo linux redhat suse conectiva
2.1