VoIPshield Exposes Vulnerabilities
Source: www.voip-news.com
There are security vulnerabilities in VoIP systems marketed by Avaya, Cisco and Nortel, according to VoIPshield Laboratories.VoIPshield helps companies that it exposes as being vulnerable with duplicating the problem so they can find a solution.
“Voice-over-IP networks are as susceptible to attack as traditional data networks, and probably more so,” said Rick Dalmazzi, president and CEO of VoIPshield. “Voice is a real-time application. Requests, in the form of VoIP phone calls, originate from outside corporate boundaries. The same network accommodations that guarantee high-quality voice availability can also facilitate malicious and illegal activity.”
According to VoIPshield:
To date, VoIPshield Labs has performed extensive security research and testing on the following VoIP products:
– Avaya - Communication Manager, Message Storage Server, SIP Enablement
Server, IP hard-phones, and IP soft-phones.
– Nortel - Business Communication Manager, Communication Server 1000,
Media Communication Server Applications, IP hard-phones, and IP
soft-phones.
– Cisco - Call Manager, Unified Communication Manager, Unity Unified
Communication, IP hard-phones, and IP soft-phones.
– Microsoft - Office Communications Server and Office Communicator.
“Over the past four years we have developed very specialized processes and tools to test these VoIP products,” said Bogdan Materna, VoIPshield’s CTO. “We look for and find security holes in all layers of the system. Hackers can mount attacks that exploit combinations of vulnerabilities, so we’ve built hundreds of signatures into our protection products and we’re adding more every day.”
