Avaya has acknowledged multiple weaknesses and vulnerabilities in Avaya Aura Communication Manager, which can be exploited by malicious, local users to disclose certain system information, bypass certain security restrictions, cause a DoS (Denial of Service), and to potentially gain escalated privileges, by malicious, local users in a guest virtual machine to cause a DoS, and by malicious people to cause a DoS.

For more information:
SA42176
SA43358
SA43693
SA43806
SA44164
SA44248
SA44466
SA44490
SA44754
SA45253

The weaknesses and vulnerabilities are reported in versions 4.x and 5.x.

Solution
Update to version 5.2.1 and install Kernel Service Pack 5 and Security Service Pack 2 (PLAT-rhel4-1012).
Original Advisory
Avaya (ASA-2011-154, ASA-2011-238):
https://downloads.avaya.com/css/P8/documents/100141102
https://downloads.avaya.com/css/P8/documents/100147390

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers