CVE-2011-5096

CRITICAL 10.0CVE-2011-5096 · Published 03/07/2012 · updated 16/06/2026

In short

CVE-2011-5096 is a CRITICAL (CVSS 10.0) vulnerability affecting aura application server 5300 (avaya).
Chance of exploitation in the next 30 days (EPSS): 3.9%, higher than 90.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aura application server 5300 avaya	`= 1.0= 2.0`	No fix yet

Description

Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet.

References

zerodayinitiative.com/advisories/ZDI-11-260
downloads.avaya.com/css/P8/documents/100146108 · Vendor Advisory

More vulnerabilities in aura application server 5300

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free