Test Finds Vulnerabilities in Avaya, Cisco and Nortel Products

According to the obtained reports, security flaws have been found in the
Avaya SIP Enablement Services along with the Cisco that malicious people
could exploit to expose sensitive information as well as to compromise an
affected system.

Also, the interface of Web administration has been found containing
certain pages that fail to perform authentication checks. As a result, the
situation could be abused to reveal sensitive information.

Furthermore, non-specified errors in input validation in the
administration interface could also be abused to run an arbitrary software
on the vulnerable system. This could potentially reveal system information
as well as sensitive information. But, for the exploitation to be
successful, su...

» SPAMfighter News - 7/17/2008