Friday December 5, 2008 7:03 PM AEST
Vulnerability Alerts
SANS
 
Microsoft
 
CERT/CC
 
 
Latest Comments
"Excellent info. If you use Gumtree Australia you will see many obvious scam posts in all ..."
on Scammers target online car buyers, warns ACCC
by Marian Imrie | Dec 5, 2008 4:45 PM
 
"Very nice and useful information. UT4B4. Tape4backup.com"
on Weighing the options for securing back-up data
by Lto-4 Tape | Dec 4, 2008 9:23 PM
 
"Interesting that you do not bother to list the one AV that has consistently passed the VB100. ..."
on Latest VB100 malware test brings good news
by Ben | Dec 4, 2008 6:00 PM
 
"I like this"
on AVG update deletes critical Windows file
by nanwin | Dec 3, 2008 3:05 PM
 
"Concerned man's comments seem to intimate that if I'm using agents all will be well but the ..."
on Shavlik Technologies to broaden its patch management offerings
by Werner K | Nov 26, 2008 8:36 PM
VoIP Security

Cisco warns on IP telephony flaws

  • Email a Friend
  • Print Page
Related Articles
By Richard Thurston
May 16, 2008 10:21 AM
Tags: "cisco" | "IP | flaws" | "viop | security"
Cisco Unified Communications Manager, one of the most popular IP telephony products in the market, contains multiple denial of service vulnerabilities, the company admitted in a security advisory on Wednesday.

The vulnerabilities could be exploited to interrupt voice services, Cisco said. This can be carried out remotely and without user interaction.

The company has released patches and urged businesses to apply them. Four services are affected: Certificate Trust List Provider, Certificate Authority Proxy Function, SIP and SNMP Trap.

The vulnerabilities affect a wide range of models across versions 4,5 and 6. Unified Communications Manager Express - the call handling software embedded in Cisco's Integrated Services Routers (ISRs) which is often used in branch office locations - is not affected.

Separately, Cisco has revealed three denial of service vulnerabilities which could take down its presence software. The company has made patches available.

Secure Computing Magazine

 
Ads by Google
Thoughts on this article? Add a comment below.
Be the first to comment on this article.

Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 
Tripwire - Click here to win an iTouch
 
 
Messaging Whitepapers
 
Popular Tags
apple digital firms flaws free information major malware mashup microsoft patches pdf policy professional report security secuware updates vendors vulnerability