CVE-2005-0003: Avaya Converged Communications Server

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.

Affected products

• Avaya Converged Communications Server: version 2.0 only
• Avaya Intuity Audix: any version
• Avaya MN100: any version
• Avaya Modular Messaging Message Storage Server: version 1.1 only; version 2.0 only
• Avaya Network Routing: any version
• Avaya s8300: version r2.0.0 only; version r2.0.1 only
• Avaya s8500: version r2.0.0 only; version r2.0.1 only
• Avaya s8700: version r2.0.0 only; version r2.0.1 only
• Avaya s8710: version r2.0.0 only; version r2.0.1 only
• Linux Linux Kernel: version 2.4.0 only; version 2.4.1 only; version 2.4.2 only; version 2.4.3 only; version 2.4.4 only; version 2.4.5 only; …
• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only; version 10.1 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only; version 3.0 only
• Mandrakesoft Mandrake Multi Network Firewall: version 8.2 only
• Red Hat Enterprise Linux: version 3.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only

Published 2005-04-14. Last modified 2026-06-16.