Secunia

Description

Avaya has acknowledged some vulnerabilities in various products, which can be exploited by malicious, local users to access files outside the "open_basedir" root, and by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

For more information:
SA13023
SA14792

NOTE: No included products utilize the PHP cURL extensions or process images using PHP.

Solution
Do not host PHP scripts, which process images from untrusted sources, and grant only trusted users access to affected systems.
Further details available in Customer Area

Original Advisory
Avaya:
http://support.avaya.com/elmodocs2/security/ASA-2005-136_RHSA-2005-405_RHSA-2005-406.pdf

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area