Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-0506. PoCs published by Adrian _pagvac_ Pastor.
AI-analyzed exploit summary This exploit reads sensitive data (username, password, and PBX IP address) from the Windows Registry where Avaya IP Office Phone Manager stores it in cleartext. It demonstrates the vulnerability by querying registry keys under HKEY_LOCAL_MACHINE.
Description
The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic.
Exploits (1)
This exploit reads sensitive data (username, password, and PBX IP address) from the Windows Registry where Avaya IP Office Phone Manager stores it in cleartext. It demonstrates the vulnerability by querying registry keys under HKEY_LOCAL_MACHINE.