CVEvulnerability
CVE-2008-6797
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-05-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-310
Description
The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
• mitel mitel nupoint messenger r3
• mitel mitel nupoint messenger r11
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/576996 US Government Resource
- http://www.mitel.com/resources/NuPoint_and_Exchange.pdf Vendor Advisory
- http://www.securityfocus.com/bid/34847 www.securityfocus.com
- http://www.kb.cert.org/vuls/id/576996 US Government Resource
- http://www.mitel.com/resources/NuPoint_and_Exchange.pdf Vendor Advisory
- http://www.securityfocus.com/bid/34847 www.securityfocus.com