Secunia

Avaya has acknowledged a vulnerability in Avaya CMS, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise an application using the library.

For more information:
SA33722

The vulnerability is reported in Avaya CMS R13/R13.1, R14/R14.1, and R15.

Solution
The vendor recommends that local and network access to the affected systems be restricted until an update is available.
Original Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-025.htm

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area