[2/5] Avaya Products mod_perl “path_info” Denial of Service Vulnerability
:Avaya has acknowledged a vulnerability in various Avaya products, which potentially can be exploited by malicious people to cause a DoS (Denial of Service).For more information:SA24678The following products are affected:* Avaya Communication Manager (CM 2.x and CM 3.0)* Avaya Intuity LX (all versions)* Avaya EMMC (1.017)* Avaya Messaging Storage Server (all versions)* Avaya Message Networking (all versions)NOTE: mod_perl is installed but not actively in use by these products.Solution:Avaya Communication Manager:Update to Avaya Communication Manager 3.1 or later.Avaya Intuity LX, EMMC, Messaging Storage Server, Message Networking:The vendor recommends that local and network access to the affected systems be restricted until an update is available.Original Advisory:http://support.avaya.com/elmodocs2/security/ASA-2007-293.htmOther References:SA24678:http://secunia.com/advisories/24678/
Original post by manisha
Posted in Advisories - Exploits |
| [2/5] Avaya Products mod_perl “path_info” Denial of Service Vulnerability