Secunia

Avaya has acknowledged that some products are affected by the recently reported vulnerabilities in various vendors' H.323 protocol implementations.

The vulnerabilities are caused due to various errors in the processing of H.225 messages over TCP. This can be exploited by malicious people to crash or reboot an affected device by sending specially crafted messages to it (default port 1720/tcp). Some vulnerabilities can furthermore be exploited to compromise an affected Communication Manager server.

The following security products running VPNos 4.2, 4.3, or 4.31.29 with H.323 NAT capability enabled are affected:

* SG5/5X Security Gateways
* SG200 Security Gateway
* SG203/208 Security Gateways

The following Communication Manager servers are also affected:

* S8700 Media Servers
* S8500 Media Servers
* S8300 Media Servers
* S8100 Media Servers
* DEFINITY Server R
* DEFINITY Server SI/CSI

Solution
The vulnerability has been fixed in VPNos 4.4 and updates have been issued for other products (see vendor advisory for more information).
Changelog
Further details available in Customer Area

Original Advisory
http://support.avaya.com/japple/css/japple?temp.groupID=128450&temp.selectedFamily=128451&temp.selectedProduct=154235&temp.selectedBucket=126655&temp.feedbackState=askForFeedback&temp.documentID=158718&PAGE=avaya.css.CSSLvl1Detail&executeTransaction=avaya.css.UsageUpdate()

Deep Links
Links available in Customer Area