Avaya Aura Sip Enablement Services vulnerabilities

2 known vulnerabilities affecting avaya/aura_sip_enablement_services.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2009-3939HIGHCVSS 7.1v5.22009-11-16

CVE-2009-3939 [HIGH] CWE-732 CVE-2009-3939: The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.

CVE-2006-1058MEDIUMCVSS 5.5fixed in 5.02006-04-04

CVE-2006-1058 [MEDIUM] CWE-916 CVE-2006-1058: BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users t BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.