Avaya has acknowledged some vulnerabilities in Avaya Modular Messaging, which can be exploited by malicious, local users to gain escalated privileges.

For more information:
SA21864

The vulnerabilities affects Avaya Messaging Storage Server version 3.0.

Solution
The vendor recommends that local and network access to the affected systems should be restricted until an update is available.
Original Advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-190.htm

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers