CVE-2005-0506

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-03-14 · updated 2026-06-16

Description

The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic.

Affected products

Avaya Ip Office Phone Manager: all versions
Avaya Ip Soft Phone: all versions

References

http://marc.info/?l=bugtraq&m=110909733831694&w=2
http://marc.info/?l=bugtraq&m=110910486128709&w=2
http://support.avaya.com/elmodocs2/security/ASA-2005-041_Sensitive_Info_Leak.pdf
http://marc.info/?l=bugtraq&m=110909733831694&w=2
http://marc.info/?l=bugtraq&m=110910486128709&w=2
http://support.avaya.com/elmodocs2/security/ASA-2005-041_Sensitive_Info_Leak.pdf

Get alerted when CVE-2005-0506 or the next vulnerability affects your stack