Avaya Messaging Storage Server vulnerabilities

6 CVEs affecting Avaya Messaging Storage Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0115, published 2009-03-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-3081, published 2008-07-09. Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days. Multiple unspecified "input validation" vulnerabilities in the Web management interface (aka Messaging Administration interface) in Avaya Message Storage Server (MSS) 3.x and 4.0, and possibly…
CVE-2007-5830, published 2007-11-05. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the administrative interface in Avaya Messaging Storage Server (MSS) 3.1 before SP1, and Message Networking (MN) 3.1, allows remote attackers to cause a denial of service…
CVE-2009-0115, published 2009-03-30. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating…
CVE-2001-1494, published 2001-12-31. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root…
CVE-2008-2812, published 2008-07-09. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL…
CVE-2006-1058, published 2006-04-04. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.