Avaya has acknowledged some vulnerabilities in Avaya CMS, which can be exploited by malicious people to cause a DoS (Denial of Service), disclose potentially sensitive information, or potentially compromise an application using the libpng library.

For more information:
SA35302

The vulnerabilities are reported in Avaya CMS R15.

Solution
The vendor recommends that local and network access to the affected systems be restricted until an update is available.
Original Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers