CVE-2004-0495: avaya converged_communications_server
Vulnerability summary
CVE-2004-0495 is a high (CVSS 7.2) vulnerability in avaya converged_communications_server. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 36.7% of scored vulnerabilities.
Not severe (CVSS 7.2, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 23-06-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.42%
Chance of exploitation in the next 30 days
Percentile
37%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.42% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Avaya5 products
- converged_communications_server2.0
- modular_messaging_message_storage_servers3400
- s8300r2.0.0 | r2.0.1
- s8500r2.0.0 | r2.0.1
- s8700r2.0.0 | r2.0.1
Suse2 products
- suse_email_server3.1 | iii
- suse_linux7 | 8 | 8.0 | 8.1 | 8.2 | 9.0 | 9.1
Conectiva1 product
- linux8.0 | 9.0
Gentoo1 product
- linux1.4
Linux1 product
- linux_kernel2.4.18 | 2.4.19 | 2.4.21 | 2.4.22 | 2.4.23 | 2.4.24 | 2.4.25 | 2.4.26 | 2.6.0 | 2.6.1 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.2 | 2.6.3 | 2.6.4 | 2.6.5 | 2.6.6 | 2.6.6:rc1 | 2.6.7 | 2.6.7:rc1
Redhat1 product
- enterprise_linux2.1 | 3.0
6 vendors · 11 products
References
12 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2961VDB EntrySignatureX Refsource OVAL
- www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066Vendor AdvisoryX Refsource MANDRAKE
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10155VDB EntrySignatureX Refsource OVAL