Avaya has acknowledged a vulnerability in Perl in Avaya Communication Manager, which can potentially be exploited by malicious people to compromise a vulnerable system.

For more information:
SA27546

The vulnerability is reported in CM 2.x and later.

Solution
The vendor recommends that local and network access to the affected systems be restricted until an update is available.
Original Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-317.htm

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers