Avaya has acknowledged a vulnerability in Avaya CMS, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

For more information:
SA31919

The vulnerability affects Avaya CMS R12, R13/R13.1, and R14/R14.1.

Solution
The vendor recommends that local and network access to the affected systems be restricted until an update is available.
Original Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-383.htm

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers