Description
By exploiting vulnerabilities within the web administration interface within a POST command it is possible to perform a variety of actions. By exploiting a vulnerability within the Backup History it is possibleto inject commands which will be executed as the logged in user.
Recommendations
Avaya has acknowledged the issue and is issuing patches to correct it for the following versions of Communication Manager software: CM 3.1.4 SP2, CM 4.0.3 SP1, CM 5.0 SP3, CM 5.1. More details could be found in Avaya Security Advisory ASA-2008-391 at http://support.avaya.com/elmodocs2/security/ASA-2008-391.htm . In the short term it is recommended that a VoIP aware IPS product, such as VoIPguard, with signatures to detect attempts to exploit this issue, be implemented to prevent it from being exploited. Implementing best practices can limit the exposure of this issue. Avaya customers with a valid support agreement may wish to speak with their support contact in order to obtain further vendor details.