CVE-2011-5096

Name of the Vulnerable Software and Affected Versions Avaya Aura Application Server 5300 versions 1.x before 1.0.2 Avaya Aura Application Server 5300 version 2.0 before Patch Bundle 10

Description The issue is related to a stack-based buffer overflow in the cstore.exe component of the Media Application Server. This can be exploited by remote attackers to execute arbitrary code. The exploitation occurs via a crafted cs anams parameter in a "CONTENT STORE ADMIN REQ" packet.

Recommendations For Avaya Aura Application Server 5300 versions 1.x before 1.0.2, update to version 1.0.2 or later. For Avaya Aura Application Server 5300 version 2.0, apply Patch Bundle 10 or later.