Avaya has acknowledged some vulnerabilities in Firefox, included in Avaya Messaging Storage Server, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting attacks, or potentially to compromise a vulnerable system.

For more information:
SA22722

The following product is affected:
* Avaya Messaging Storage Server (version MSS 3.0)

Solution
The vendor recommends that local and network access to the affected systems should be restricted until an update is available.
Original Advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-246.htm

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers