Cybertrion Systems

[3/5] Avaya CMS / IR BIND Predictable DNS Query IDs Vulnerability

October 31st, 2007 by
[3/5] Avaya CMS / IR BIND Predictable DNS Query IDs Vulnerability

:Avaya has acknowledged a vulnerability in Avaya CMS and IR, which can be exploited by malicious people to poison the DNS cache.For more information:SA26858All Avaya CMS and IR versions are reportedly affected.Solution:The vendor recommends that local and network access to the affected systems be restricted until an update is available.Original Advisory:http://support.avaya.com/elmodocs2/security/ASA-2007-448.htmOther References:SA26858:http://secunia.com/advisories/26858/

Original post by manisha

[3/5] Avaya CMS / IR BIND Predictable DNS Query IDs Vulnerability

Related Articles:
  • [3/5] BIND Predictable DNS Query IDs Vulnerability
  • [3/5] BIND 8 Predictable DNS Query IDs Vulnerability
  • [3/5] Sun Solaris BIND Predictable DNS Query IDs Vulnerability
  • [3/5] Nortel Products BIND Predictable DNS Query IDs Vulnerability
  • [2/5] ISC BIND libbind “inet_network()” Off-By-One Vulnerability


  • Posted in Advisories - Exploits | | [3/5] Avaya CMS / IR BIND Predictable DNS Query IDs Vulnerability

    << [3/5] IBM WebSphere “uddigui/navigateTree.do” Cross-Site Scripting and Request Forgery | [3/5] IBM AIX BIND 8 Predictable DNS Query IDs Vulnerability >>