:Avaya has acknowledged a vulnerability in multiple Avaya Products, which can be exploited by malicious, local users to perform certain actions with escalated privileges.For more information:SA27145The following products and versions are affected:* Avaya Communication Manager (CM 3.x, 4.x, and 5.0)* Avaya Intuity Audix LX (all versions)* Avaya Messaging Storage Server (all versions)* Avaya Message Networking (all versions)* Avaya CCS/SES (SES 3.1.1, 3.1.2, and 4.0)* Avaya AES (all versions)Solution:The vendor recommends that local and network access to the affected systems be restricted until an update is available.Original Advisory:http://support.avaya.com/elmodocs2/security/ASA-2008-023.htmOther References:SA27145:http://secunia.com/advisories/27145/

Original post by manisha