Cisco tackles security threat
by Lin Freestone
December 6, 2007
Cisco is trying to tackle a security threat in its VoIP phones that allow hackers to eavesdrop on conversations. The threat was discovered by a researcher working for Telindus, and allows hackers to remotely eavesdrop on Cisco Unified IP phones.
Cisco Systems has confirmed that it is possible to eavesdrop on remote conversations using Cisco VoIP phones.
The company has stated that an attacker with valid Extension Mobility authentication credentials could cause a Cisco Unified IP Phone configured to use the Extension Mobility feature to transmit or receive a Real-Time Transport Protocol audio stream.
Cisco adds that Extension Mobility authentication credentials are not tied to individual IP phones, and that any Extension Mobility account configured on an IP phone's Cisco Unified Communications Manager/CallManager service can be used to perform an eavesdropping attack.
Cisco has published some work-arounds to this problem in its security response.
Email This Post
Print This Post
Add to Bookmarks:
Related posts to "Cisco tackles security threat":
VoIP security solutions from CiscoCisco has brought out two security solutions to defend against potentially dangerous exploits via its VoIP kit, including the possibility of malicious...
Russia originates most of world’s complex spyware and viruses
Research from PC Tools, a international provider of spyware protection, has revealed that Russia has superseded the US and China as the world's highes...
Newport Networks Face Service Quality Challenges
Newport Networks spoke out today about the biggest challenge to face the session border controller manufacturer, quality of service management. Th...
Researchers highlight threat to VoIP security
Researchers from Johns Hopkins University in Baltimore, USA, have identified compression techniques as a potential security risk for VoIP users when u...
Cisco releases patches for VoIP products
Cisco Security has released patches for vulnerabilities in its VoIP products. VoIPshield Laboratories identified the vulnerabilities in Cisco's Un...
No Comments »
No comments yet.
Leave a comment
Previous: « Nokia Siemens Networks launches VoIP communications key
Next: VoIP services must allow 999 calls from September »
Visited 872 times, 2 so far today
