TITLE: Avaya Products util-linux / mount Security Issue and Vulnerability SECUNIA ADVISORY ID: SA18502 VERIFY ADVISORY: http://secunia.com/advisories/18502/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Avaya Modular Messaging 2.x http://secunia.com/product/4484/ Avaya Message Networking 2.x http://secunia.com/product/5801/ Avaya Intuity LX http://secunia.com/product/3279/ DESCRIPTION: Avaya has acknowledged a security issue and a vulnerability in various products, which potentially can be exploited by malicious, local users to gain escalated privileges. For more information: SA16785 SA17154 The security issue and vulnerability have been reported in the following products: * Avaya Intuity LX * Avaya Messaging Storage Server * Avaya Message Networking SOLUTION: Restrict local and network access to affected systems until an update is available. ORIGINAL ADVISORY: http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm OTHER REFERENCES: SA16785: http://secunia.com/advisories/16785/ SA17154: http://secunia.com/advisories/17154/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------