Signature Detail
Short Name |
APP:AVAYA-CCRWEBCLIENT-RCE |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Code Execution |
Release Date |
2012/10/30 |
Update Number |
2198 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Code Execution
This signature detects attempts to exploit a known vulnerability in the Avaya IP Office Customer Call Reporter. A successful attack can lead to arbitrary remote code execution within the context of the server.
Extended Description
Avaya IP Office Customer Call Reporter is prone to a remote code-execution vulnerability. Attackers can leverage this issue to execute arbitrary code with the privileges of the user running the affected application. Avaya IP Office Customer Call Reporter 7.0 and 8.0 are vulnerable; other versions may also be affected.
Affected Products
- Avaya IP Office Customer Call Reporter 7.0
- Avaya IP Office Customer Call Reporter 8.0
References
- BugTraq: 54225
- CVE: CVE-2012-3811