CVE-2004-0205: Avaya Definity One Media Server

High severity, CVSS 7.2. EPSS: 24.5% chance of exploitation in the next 30 days.

Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.

Affected products

• Avaya Definity One Media Server: any version
• Avaya IP600 Media Servers: any version
• Avaya Modular Messaging Message Storage Server: version s3400 only
• Avaya s8100: any version
• Microsoft Internet Information Server: version 4.0 only

Published 2004-08-06. Last modified 2026-06-16.