Avaya has acknowledged a vulnerability in some products, which can be exploited by malicious people to cause a DoS (Denial of Service) on an active TCP session.

For more information:
SA15393

The vulnerability affect the following products:
* Avaya G250/G350/G700 (all versions)
* Avaya Modular Messaging (all versions)
* Avaya MN100 (versions 1.x through 2)
* Avaya Intuity LX (versions 1.1 through 5.x)
* Avaya IP Phones (versions 1.x through 2.1)

Solution
The vendor will reportedly provide patches in the next major release.
Further details available to Secunia VIM customers

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers