Avaya has acknowledged some vulnerabilities in multiple Avaya products, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a user's system.

For more information:
SA35884
SA37175
SA38257

The vulnerabilities are reported in the following products and versions:
* Avaya Aura Application Enablement Services (version 5.2.x)
* Avaya Aura Communication Manager (all versions)
* Avaya Messaging Storage Server (all versions)
* Avaya Aura Session Manager (versions 1.1 and 5.2)
* Avaya Aura SIP Enablement Services (all versions)
* Avaya Aura System Platform (version 1.1)

Solution
The vendor recommends that local and network access to the affected systems be restricted until an update is available.
Original Advisory
Avaya (ASA-2010-116):
https://support.avaya.com/css/P8/documents/100081589

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers