Stack overflow

2012-07-0321:55:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.6%

JSON

Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet.

CPENameOperatorVersion
aura_application_server_5300eq1.0
aura_application_server_5300eq2.0

CPE	Name	Operator	Version
	aura_application_server_5300	eq	1.0
	aura_application_server_5300	eq	2.0

References

zerodayinitiative.com/advisories/ZDI-11-260/

downloads.avaya.com/css/P8/documents/100146108