Avaya has acknowledged some vulnerabilities in various Avaya products, which can be exploited by malicious people to compromise a user's system.

For more information:
SA25941
SA30731
SA31592

The vulnerabilities affect the following products and versions:
* Avaya Communication Manager (all versions)
* Avaya Intuity AUDIX LX (all versions)
* Avaya Messaging Storage Server (all versions)
* Avaya Message Networking (all versions)
* Avaya SIP Enablement Services (all versions)
* Avaya Voice Portal (all versions)
* Avaya Meeting Exchange (versions 5.0.x and 5.1.x)
* Avaya Proactive Contact (all versions)
* Avaya AES (all versions)

Solution
The vendor recommends that local and network access to the affected systems be restricted until an update is available.
Original Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers