CVE-2004-0800: Avaya Call Management System Server

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain privileges via format strings in the argv[0] value.

Affected products

• Avaya Call Management System Server: version 9.0 only; version 11.0 only; version 12.0 only
• Sun Dtmail: any version
• Sun Solaris: version 8.0 only; version 9.0 only
• Sun Sunos: version 5.8 only

Published 2004-08-24. Last modified 2026-06-16.