Security Hole in VoIP Lets Hackers Reach Out and Hear Someone   - 1,614 Views,

Summary: Cisco Systems is reporting that there have been several security flaws found in their CallManager VoIP system, the most serious being with their Aupair.exe component. The flaws, which cause vulnerabilities in CallManager in its default settings, can allow someone to eavesdrop on ...

Previous Article « What’s in a Name: The Blogcast Formerly Known as Podcast
Read Next Article » Lebreat “Breatle AntiVirus” Actually Double-Edged Worm for Windows

  Follow Anne on Twitter     Friend Anne on Facebook

Cisco Systems is reporting that there have been several security flaws found in their CallManager VoIP system, the most serious being with their Aupair.exe component. The flaws, which cause vulnerabilities in CallManager in its default settings, can allow someone to eavesdrop on calls, and even reroute VoIP calls to another destination (nasty!)

According to Internet Security Systems, in discussing the CallManager and Aupair.exe issues, “An attacker may be able to redirect calls or perform eavesdropping as a result of this compromise. Successful exploitation of this vulnerability could be used to gain unauthorized access to networks and machines with Cisco VoIP products.”

While to date there have been no known exploits of the vulnerabilities, Cisco has a major lead in marketshare of enterprise VoIP, with 42% of the market in the United States alone. In other words, Cisco’s VoIP products are widely deployed.

If you are running Cisco’s CallManager where you are, you should go to Cisco’s site to get the security updates here.

Security Hole in VoIP Lets Hackers Reach Out and Hear Someone

 Follow Anne on Twitter

 Twitter Explained in Plain English

 Friend Anne on Facebook

Previous Article « What’s in a Name: The Blogcast Formerly Known as Podcast
Read Next Article » Lebreat “Breatle AntiVirus” Actually Double-Edged Worm for Windows

Read more:

»  Aural Sex Spam - Coming Soon to a VoIP Appliance Near You

»  VOIP 911: Weakness in VoIP 911 System Leads to Lawsuit Against Vonage

»  How to Take Down the VoIP Competition if You are a VoIP Provider

»  VoIP On Cordless Housephone to Be Available Through Vonage and Uniden!

For additional similar stories check out our archives on Security, VoIP

NOTE: We never, ever, ever will recommend any product or service on this site that we have not regularly used ourselves and do not wholeheartedly believe in. That said, in some cases after being very pleased with a product or service, we may enter into a relationship with the provider of that product or service such that if someone purchases that product or service based on our recommendation, we may get a small payment. Such payments go towards the upkeep of the Internet Patrol.

 

No Comments »

No comments yet.

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
 This article first appeared on 7/17/2005
The Internet Patrol
Patrolling the Internet for You!