Avaya Message Networking vulnerabilities

6 CVEs affecting Avaya Message Networking, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5285, published 2019-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-5285, published 2019-11-15. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote…
CVE-2007-5830, published 2007-11-05. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the administrative interface in Avaya Messaging Storage Server (MSS) 3.1 before SP1, and Message Networking (MN) 3.1, allows remote attackers to cause a denial of service…
CVE-2009-0115, published 2009-03-30. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating…
CVE-2001-1494, published 2001-12-31. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root…
CVE-2008-2812, published 2008-07-09. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL…
CVE-2006-1058, published 2006-04-04. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.