CVE:CVE-2008-6708
CNNVD:CNNVD-200904-241
当和Avaya Communication Manager 3.1.x和4.x一起被使用时，Avaya SIP Enablement Services (SES) 3.x和4.0中的web管理界面存在未明漏洞。远程认证管理员可以借助与"数据查看或重新储存参数"的配置相关的未知向量，获得根特权。
solution:Upgrade avaya communication_manager to a higher version than 3.1,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,4.0,4.0.1,4.0.1:sp15215,4.0.1:sp15500,4.0.3,and avoid the version 3.1,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,4.0,4.0.1,4.0.1:sp15215,4.0.1:sp15500,4.0.3; Upgrade avaya sip_enablement_services to a higher version than 3.0,and avoid the version 3.0