CVE-2011-5096

Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://zerodayinitiative.com/advisories/ZDI-11-260/
https://downloads.avaya.com/css/P8/documents/100146108	Vendor Advisory
http://zerodayinitiative.com/advisories/ZDI-11-260/
https://downloads.avaya.com/css/P8/documents/100146108	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:avaya:aura_application_server_5300:1.0:::::::*
	cpe:2.3:a:avaya:aura_application_server_5300:2.0:::::::*

History

21 Nov 2024, 01:33

Type	Values Removed	Values Added
References	~~() http://zerodayinitiative.com/advisories/ZDI-11-260/ -~~	() http://zerodayinitiative.com/advisories/ZDI-11-260/ -
References	~~() https://downloads.avaya.com/css/P8/documents/100146108 - Vendor Advisory~~	() https://downloads.avaya.com/css/P8/documents/100146108 - Vendor Advisory

Information

Published : 2012-07-03 21:55

Updated : 2024-11-21 01:33

NVD link : CVE-2011-5096

Mitre link : CVE-2011-5096

CVE.ORG link : CVE-2011-5096

JSON object : View

Products Affected

avaya

aura_application_server_5300

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2011-5096", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-07-03T21:55:01.317", "references": [{"url": "http://zerodayinitiative.com/advisories/ZDI-11-260/", "source": "cve@mitre.org"}, {"url": "https://downloads.avaya.com/css/P8/documents/100146108", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://zerodayinitiative.com/advisories/ZDI-11-260/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://downloads.avaya.com/css/P8/documents/100146108", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en cstore.exe en Media Application Server (MAS) en Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) v1.x anteriores a v1.0.2 y v2.0 anteriores a Patch Bundle 10, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s del par\u00e1metro cs_anams en un paquete CONTENT_STORE_ADMIN_REQ packet."}], "lastModified": "2024-11-21T01:33:37.540", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:avaya:aura_application_server_5300:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED5A80A1-A5EE-4451-A03F-36C513FBB199"}, {"criteria": "cpe:2.3:a:avaya:aura_application_server_5300:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "143818EF-0E0B-47D5-B19A-759986E01568"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}