|
|
Sipera VIPER Lab Identifies AOL, Avaya, MSN and Nortel VoIP Phone Vulnerabilities
2007-06-20
The major threat advisories that affect these VoIP soft phones include: -- Resource exhaustion and buffer overflow attack vulnerabilities in some AOL Instant Messenger voice clients, which might cause denial of service and may allow a remote attacker to crash the IM and voice client. -- A buffer overflow vulnerability and a SIP parsing error in Avaya one-X(TM) Desktop Edition SIP soft phones, potentially allow a remote attacker to partially disable the phone, disconnect it from the server and crash the phone. -- A resource exhaustion attack vulnerability in some Microsoft(R) MSN Messenger voice chat clients, which might cause denial of service. -- A buffer overflow vulnerability and an improper message parsing vulnerability in Nortel Networks PC Client SIP soft phones, which may allow a remote attacker to crash the phone.
Sipera VIPER Lab also announced additional VoIP hard phone advisories for Avaya 4602SW SIP phones, which are vulnerable to server impersonation, accepting SIP requests from random source IP addresses, open UDP port flooding and RTP port flooding. These vulnerabilities can expose the phones to call hijacking, malicious messaging, denial of service, and voice quality degradation.
"Soft phones provide great flexibility for communications but are very vulnerable to attacks. These not only pose threats to the VoIP system but also to the computing and network environments," said Krishna Kurapati, Sipera founder/CTO and head of Sipera VIPER Lab. "Left unaddressed, these vulnerabilities can disrupt critical business and personal voice communications, negating the many advantages to VoIP. Sipera works with its customers and vendors to address these threats before they become a major issue."
Sipera VIPER Lab proactively identifies VoIP/unified communication threats, and is comprised of experienced VoIP security researchers operating 24/7/365 from Richardson, Texas, and Hyderabad, India. Since its inception in 2003, Sipera VIPER Lab has identified thousands of potential security threats and vulnerabilities which include fuzzing, floods and distributed floods, spoofing, stealth attacks and spam. VIPER Lab research is used to continuously improve the Sipera IPCS products that enable, control and protect real-time unified communications for enterprises and service providers.
About Sipera Systems
Sipera Systems provides enterprises and service providers with comprehensive VoIP security solutions that protect, control and manage real- time unified communications. The Sipera IPCS(TM) products combine VPN, Firewall/SBC, Intrusion Prevention, Anti-Spam, Compliance and Troubleshooting functionality for VoIP systems in a single device. This securely enables IP PBXs, VoIP remote users, SIP trunks, data/voice VLANs, hosted VoIP services and IMS or UMA-based networks. Comprised of top vulnerability research experts, the Sipera VIPER(TM) Lab concentrates its efforts towards identifying VoIP vulnerabilities, while Sipera LAVA(TM) tools verify networks' readiness to resist attacks. Founded in 2003, and backed by Sequoia Capital, Austin Ventures and Star Ventures, Sipera is headquartered in Richardson, TX.
By Sipera Systems
|
|
|
|
VoIP Providers List Information |
|
|
|
If you have any constructive thoughts, creative ideas, or reasonable offers, please, contact us.
|
|
Send Email to Helen O'Neill if you have any questions either about this website, or about VoIP providers, or VoIP in general.
|
|
Send Email to our technical support if you have any technical queries.
|
About VoIP Providers List
VoIP Providers List services save time for companies searching both for information and interconnection partners, interested in voice minutes exchange, i.e. VoIP minutes termination and origination, as well as hardware and software trade. We provide information on interconnection services, VoIP hardware solutions and VoIP software , as well as overall situation in the VoIP industry.
VoIP Providers List is constantly moderated, and thus we can guarantee that any VoIP provider published in the web-based company catalogue has provided accurate details on its services and operations.
We are constantly working on improvement and development of our services. Your comments and proposals regarding the services are highly welcome. Please, do not hesitate to contact us providing with your ideas, opinion, and feed-back. We will be grateful for any information and useful links on Voice over IP, VoIP hardware, VoIP software, and VoIP Providers. |
|
|
|
|
VoIP Providers Statistics |
|
|
Providers in database: 3315
Users Online: 273
|
|
|
