CVE-2004-0495: Avaya Converged Communications Server

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.

Affected products

• Avaya Converged Communications Server: version 2.0 only
• Avaya Intuity Audix: any version
• Avaya Modular Messaging Message Storage Server: version s3400 only
• Avaya s8300: version r2.0.0 only; version r2.0.1 only
• Avaya s8500: version r2.0.0 only; version r2.0.1 only
• Avaya s8700: version r2.0.0 only; version r2.0.1 only
• Conectiva Linux: version 8.0 only; version 9.0 only
• Gentoo Linux: version 1.4 only
• Linux Linux Kernel: version 2.4.18 only; version 2.4.19 only; version 2.4.21 only; version 2.4.22 only; version 2.4.23 only; version 2.4.24 only; …
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Suse Suse Email Server: version 3.1 only; version iii only
• Suse Suse Linux: version 7 only; version 8 only; version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; …
• Suse Suse Linux Admin-Cd For Firewall: any version
• Suse Suse Linux Connectivity Server: any version
• Suse Suse Linux Database Server: any version
• Suse Suse Linux Firewall Cd: any version
• Suse Suse Linux Office Server: any version
• Suse Suse Office Server: any version

Published 2004-08-06. Last modified 2026-06-16.