Description

Avaya has acknowledged multiple vulnerabilities in various products.

1) A vulnerability in zip can potentially be exploited by malicious, local users to gain escalated privileges.

For more information:
SA13094

The following products are affected:
* Avaya Network Routing (All versions)
* Avaya MN100 (All versions)
* Avaya Intuity LX (version 1.1-5.x)
* Avaya Modular Messaging MSS (All versions)

2) Some vulnerabilities in VIM can be exploited by malicious, local users to gain escalated privileges.

For more information:
SA13490

The following products are affected:
* Avaya S8700/S8710/S8500/S8300 (All versions)
* Avaya Converged Communication Server (All versions)
* Avaya Network Routing (All versions)
* Avaya MN100 (All versions)
* Avaya Intuity LX (version 1.1-5.x)
* Avaya Message Storage Server (MSS) (All versions)

3) Some vulnerabilities in libtiff can be exploited by malicious people to compromise a vulnerable system.

For more information:
SA13728
SA13607

The following products are affected:
* Avaya MN100 (All versions)
* Avaya Intuity LX (version 1.1-5.x)
* Avaya Modular Messaging MSS (All versions)

4) Some vulnerabilities in openmotif can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

For more information:
SA13347
SA13224

The following products are affected:
* Avaya Network Routing (All versions)

5) A vulnerability in postgresql can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.

For more information:
SA12860

The following products are affected:
* Avaya MN100 (All versions)
* Avaya Intuity LX (version 1.1-5.x)
* Avaya Modular Messaging MSS (All versions)

6) Some vulnerabilities in lesstif can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

For more information:
SA12652
SA13378

The following products are affected:
* Avaya Network Routing (All versions)

7) A vulnerability in xpdf can be exploited by malicious people to compromise a vulnerable system.

For more information:
SA13602

The following products are affected:
* Avaya Network Routing (All versions)

Solution
The vendor recommends the following actions:
Further details available in Customer Area

Changelog
Further details available in Customer Area

Original Advisory
1) http://support.avaya.com/elmodocs2/security/ASA-2005-019_RHSA-2004-634.pdf
2) http://support.avaya.com/elmodocs2/security/ASA-2005-020_RHSA-2005-019.pdf
3) http://support.avaya.com/elmodocs2/security/ASA-2005-021_RHSA-2005-019.pdf
4) http://support.avaya.com/elmodocs2/security/ASA-2005-023_RHSA-2004-537.pdf
5) http://support.avaya.com/elmodocs2/security/ASA-2005-024_RHSA-2004-489.pdf
6) http://support.avaya.com/elmodocs2/security/ASA-2005-025_RHSA-2005-004.pdf
7) http://support.avaya.com/elmodocs2/security/ASA-2005-027_RHSA-2005-018.pdf

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area