CVE-2006-1058: Avaya Aura Application Enablement Services

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.

Affected products

• Avaya Aura Application Enablement Services: version 4.01 only; version 4.1 only
• Avaya Aura SIP Enablement Services: before 5.0 (fixed in 5.0)
• Avaya Message Networking: any version
• Avaya Messaging Storage Server: from 3.0, before 4.0 (fixed in 4.0)
• Busybox Busybox: version 1.1.1 only

Published 2006-04-04. Last modified 2026-06-16.