VAR-201108-0204

Vulnerability from variot - Updated: 2025-04-11 22:49

The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these domain names, as demonstrated by alarm and log information. Avaya Provided by Secure Access Link (SAL) Gateway Contains an information disclosure vulnerability. Avaya Provided by Secure Access Link (SAL) Gateway Has a problem with the default settings during installation. Avaya Has released the following vulnerability information. These servers resolve to invalid domains and pose a security threat. Secondary Core Server URL should be same as the primary Core Server URL and Secondary Remote Server URL should be same as the primary Remote Server URL."Information such as logs is not intended E-mail May be sent to the address. No need to surrender free access, this service allows you to initiate a communication connection from your own network and choose the best provider for your business. To exploit this vulnerability, an attacker would need a malicious email server with the 'secavaya.com' and 'secaxeda.com' domain names to get warnings and log information. Exploiting this issue may allow an attacker to access sensitive information that may aid in further attacks

Show details on source website
To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201108-0204",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "secure access link",
        "scope": "eq",
        "trust": 1.7,
        "vendor": "avaya",
        "version": "2.0"
      },
      {
        "model": "secure access link",
        "scope": "eq",
        "trust": 1.7,
        "vendor": "avaya",
        "version": "1.8"
      },
      {
        "model": "secure access link",
        "scope": "eq",
        "trust": 1.7,
        "vendor": "avaya",
        "version": "1.5"
      },
      {
        "model": "secure access link gateway",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "avaya",
        "version": "2.0"
      },
      {
        "model": "secure access link gateway",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "avaya",
        "version": "1.8"
      },
      {
        "model": "secure access link gateway",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "avaya",
        "version": "1.5"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "avaya",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#690315"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-2935"
      },
      {
        "db": "BID",
        "id": "48942"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-108"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3008"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:avaya:secure_access_link",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Anonymous.",
    "sources": [
      {
        "db": "BID",
        "id": "48942"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-016"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2011-3008",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2011-3008",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "VHN-50953",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2011-3008",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#690315",
            "trust": 0.8,
            "value": "0.91"
          },
          {
            "author": "NVD",
            "id": "CVE-2011-3008",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201108-108",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-50953",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#690315"
      },
      {
        "db": "VULHUB",
        "id": "VHN-50953"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-108"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3008"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these domain names, as demonstrated by alarm and log information. Avaya Provided by Secure Access Link (SAL) Gateway Contains an information disclosure vulnerability. Avaya Provided by Secure Access Link (SAL) Gateway Has a problem with the default settings during installation. Avaya Has released the following vulnerability information. These servers resolve to invalid domains and pose a security threat. Secondary Core Server URL should be same as the primary Core Server URL and Secondary Remote Server URL should be same as the primary Remote Server URL.\"Information such as logs is not intended E-mail May be sent to the address. No need to surrender free access, this service allows you to initiate a communication connection from your own network and choose the best provider for your business. To exploit this vulnerability, an attacker would need a malicious email server with the \u0027secavaya.com\u0027 and \u0027secaxeda.com\u0027 domain names to get warnings and log information. \nExploiting this issue may allow an attacker to access sensitive information that may aid in further attacks",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2011-3008"
      },
      {
        "db": "CERT/CC",
        "id": "VU#690315"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-2935"
      },
      {
        "db": "BID",
        "id": "48942"
      },
      {
        "db": "VULHUB",
        "id": "VHN-50953"
      }
    ],
    "trust": 3.24
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#690315",
        "trust": 4.2
      },
      {
        "db": "BID",
        "id": "48942",
        "trust": 4.0
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3008",
        "trust": 2.5
      },
      {
        "db": "XF",
        "id": "68922",
        "trust": 1.4
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002112",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-108",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-2935",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-016",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-50953",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#690315"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-2935"
      },
      {
        "db": "VULHUB",
        "id": "VHN-50953"
      },
      {
        "db": "BID",
        "id": "48942"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-016"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-108"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3008"
      }
    ]
  },
  "id": "VAR-201108-0204",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2935"
      },
      {
        "db": "VULHUB",
        "id": "VHN-50953"
      }
    ],
    "trust": 1.075
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2935"
      }
    ]
  },
  "last_update_date": "2025-04-11T22:49:56.943000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Product Support Notice PSN003314u",
        "trust": 0.8,
        "url": "http://support.avaya.com/css/P8/documents/100140483"
      },
      {
        "title": "Patch for Avaya Secure Access Link (SAL) Gateway Illegal Domain Server Information Disclosure Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/4585"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-2935"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-16",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-50953"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3008"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.4,
        "url": "http://www.kb.cert.org/vuls/id/690315"
      },
      {
        "trust": 3.1,
        "url": "http://www.securityfocus.com/bid/48942"
      },
      {
        "trust": 2.8,
        "url": "http://support.avaya.com/css/p8/documents/100140483"
      },
      {
        "trust": 1.4,
        "url": "http://xforce.iss.net/xforce/xfdb/68922"
      },
      {
        "trust": 1.1,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68922"
      },
      {
        "trust": 0.8,
        "url": "about vulnerability notes"
      },
      {
        "trust": 0.8,
        "url": "contact us about this vulnerability"
      },
      {
        "trust": 0.8,
        "url": "provide a vendor statement"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-3008"
      },
      {
        "trust": 0.8,
        "url": "http://jvn.jp/cert/jvnvu690315"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3008"
      },
      {
        "trust": 0.3,
        "url": "http://www.avaya.com"
      },
      {
        "trust": 0.3,
        "url": "http://www.avaya.com/usa/service/secure-access-link"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#690315"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-2935"
      },
      {
        "db": "VULHUB",
        "id": "VHN-50953"
      },
      {
        "db": "BID",
        "id": "48942"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-016"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-108"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3008"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#690315"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-2935"
      },
      {
        "db": "VULHUB",
        "id": "VHN-50953"
      },
      {
        "db": "BID",
        "id": "48942"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-016"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-108"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-3008"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2011-07-29T00:00:00",
        "db": "CERT/CC",
        "id": "VU#690315"
      },
      {
        "date": "2011-08-01T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2011-2935"
      },
      {
        "date": "2011-08-05T00:00:00",
        "db": "VULHUB",
        "id": "VHN-50953"
      },
      {
        "date": "2011-07-29T00:00:00",
        "db": "BID",
        "id": "48942"
      },
      {
        "date": "2011-08-18T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      },
      {
        "date": "1900-01-01T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201108-016"
      },
      {
        "date": "2011-08-08T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201108-108"
      },
      {
        "date": "2011-08-05T21:55:09.280000",
        "db": "NVD",
        "id": "CVE-2011-3008"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2011-07-29T00:00:00",
        "db": "CERT/CC",
        "id": "VU#690315"
      },
      {
        "date": "2011-08-01T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2011-2935"
      },
      {
        "date": "2017-08-29T00:00:00",
        "db": "VULHUB",
        "id": "VHN-50953"
      },
      {
        "date": "2011-07-29T00:00:00",
        "db": "BID",
        "id": "48942"
      },
      {
        "date": "2011-08-18T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2011-002112"
      },
      {
        "date": "2011-08-02T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201108-016"
      },
      {
        "date": "2011-08-09T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201108-108"
      },
      {
        "date": "2025-04-11T00:51:21.963000",
        "db": "NVD",
        "id": "CVE-2011-3008"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-016"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-108"
      }
    ],
    "trust": 1.2
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Avaya Secure Access Link (SAL) Gateway information disclosure vulnerability",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#690315"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Configuration Error",
    "sources": [
      {
        "db": "BID",
        "id": "48942"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201108-108"
      }
    ],
    "trust": 0.9
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.