Unscored severity · published Aug 7, 2001
CVE-2001-1261
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file
–
CVSS
1.2%
EPSS
No
On KEV
Description
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AO
Argent Office · Avaya
2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1261
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1261
Exploit
http://online.securityfocus.com/archive/1/202344
Vendor Advisory
http://www.iss.net/security_center/static/6956.php
More from Argent Office
–
CVE-2001-1259
Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload
–
CVE-2001-1260
Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing…
–
CVE-2001-1262
Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to…