CVE-2001-1260 — HIGH (10.0)

Vulnerability Description

Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Avaya	Argent Office	All versions

References

http://online.securityfocus.com/archive/1/202344ExploitVendor Advisory
http://www.iss.net/security_center/static/6954.phpVendor Advisory
http://online.securityfocus.com/archive/1/202344ExploitVendor Advisory
http://www.iss.net/security_center/static/6954.phpVendor Advisory

FAQ

What is CVE-2001-1260?

CVE-2001-1260 is a vulnerability with a CVSS score of 10.0 (HIGH). Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a...

How severe is CVE-2001-1260?

CVE-2001-1260 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2001-1260?

Check the references section above for vendor advisories and patch information. Affected products include: Avaya Argent Office.