Avaya CS1000 Communications Server Remote Denial of Service Vulnerability

Bugtraq ID:	47514
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 20 2011 12:00AM
Updated:	Apr 20 2011 12:00AM
Credit:	Anonymous
Vulnerable:	Avaya Communication Server 1000M Signaling Server 5.5 Avaya Communication Server 1000M 5.5 Avaya Communication Server 1000E Signaling Server 5.5 Avaya Communication Server 1000E 5.5
Not Vulnerable:

Avaya CS1000 Communications Server Remote Denial of Service Vulnerability

Avaya CS1000 Communications Server is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

Avaya CS1000 Communications Server Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Avaya CS1000 Communications Server Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more details.

Avaya CS1000 Communications Server Remote Denial of Service Vulnerability

References:

• ASA-2011-166: CS1000 Communications Server Denial of Service (DoS) Vulnerability (Avaya)
  
• Avaya Home Page (Avaya)
  
• ZDI-11-141: Nortel CS1000 Communications Server Remote Denial of Service Vulnera (TippingPoint Zero Day Initiative)