Avaya has acknowledged a vulnerability in Avaya CMS / IR, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

For more information:
SA22907

The following products are affected:
* Avaya CMS V9, V11, R12, R13/R13.1
* Avaya IR 2.0 Solaris 10, Solaris 8, 1.3 Solaris 8

Solution
The vendor will test the patch from Sun and make it available upon approval for CMS, and is still investigating this issue for potential vulnerability on IR.
Original Advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-284.htm

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers