Lucene search

[email protected]CVE-2011-5096

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-5096

2022-10-0316:15:12

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-5096

buffer overflow

avaya aura

mas

remote code execution

security vulnerability

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.6%

JSON

Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet.

Affected configurations

NVD

Node

avayaaura_application_server_5300Match1.0

avayaaura_application_server_5300Match2.0

CPENameOperatorVersion
avaya:aura_application_server_5300avaya aura application server 5300eq1.0
avaya:aura_application_server_5300avaya aura application server 5300eq2.0

CPE	Name	Operator	Version
avaya:aura_application_server_5300	avaya aura application server 5300	eq	1.0
avaya:aura_application_server_5300	avaya aura application server 5300	eq	2.0

References

zerodayinitiative.com/advisories/ZDI-11-260/

downloads.avaya.com/css/P8/documents/100146108

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.6%

JSON

Related for CVE-2011-5096

prion1 cvelist1 nvd1