Avaya has acknowledged some vulnerabilities in various products, which can be exploited by malicious, local users to gain escalated privileges, or by malicious people to cause a DoS (Denial of Service) or compromise a user's system or vulnerable system.

For more information:
SA16065
SA16480
SA17160
SA17161
SA17163
SA17166
SA17168

The following products are affected:
* Unified Communications Center (UCC) - S3400 (All versions)
* Modular Messaging - Messaging Application Server (MAS) (All versions)
* S8100/DefinityOne/IP600 Media Servers (All versions)

Solution
The vendor recommends applying patches from Microsoft (see Secunia Advisory links).
Original Advisory
http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers