S8300C Server

DATE	CVE	VULNERABILITY TITLE	RISK
2008-08-25	CVE-2008-3778	Permissions, Privileges, and Access Controls vulnerability in Avaya Communication Manager and SIP Enablement Services The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service (messaging outage) or gain privileges via an update request. network low complexity avaya CWE-264	7.5
2008-08-25	CVE-2008-3777	Information Exposure vulnerability in Avaya Communication Manager and SIP Enablement Services The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obtain login credentials by reading these logs. local low complexity avaya CWE-200	2.1