Unscored severity · published Jul 3, 2012
CVE-2011-5096
Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2…
–
CVSS
3.9%
EPSS
No
On KEV
Description
Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Aura Application Server 5300 · Avaya
1.0; 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-5096
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-5096
zerodayinitiative.com
http://zerodayinitiative.com/advisories/ZDI-11-260/
Vendor Advisory
https://downloads.avaya.com/css/P8/documents/100146108
More from Aura Application Server 5300
7.5
CVE-2016-5285
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which…