Thursday July 24, 2008 3:54 AM AEST
Latest Comments
"websense"
by Ruben | Jul 23, 2008 8:01 PM
 
"The hot fix in particular is KB951748 This is for xp users only Hope this helps"
by Steve | Jul 22, 2008 5:35 PM
 
"kdjfkjasd"
by fdsf | Jul 19, 2008 10:19 PM
 
"Hacked? No, it was not hacked. Lots of people were told to search for it. That's all."
by kgh0st | Jul 19, 2008 3:33 PM
 
""but experts are poring over the site's logs to find the vulnerability that allowed the security ..."
by J | Jul 18, 2008 9:53 PM

Cisco warns on IP telephony flaws

  • Email a Friend
  • Print Page
By Richard Thurston
May 16, 2008 10:21 AM
Tags: "cisco" | "IP | flaws" | "viop | security"
Cisco Unified Communications Manager, one of the most popular IP telephony products in the market, contains multiple denial of service vulnerabilities, the company admitted in a security advisory on Wednesday.

The vulnerabilities could be exploited to interrupt voice services, Cisco said. This can be carried out remotely and without user interaction.

The company has released patches and urged businesses to apply them. Four services are affected: Certificate Trust List Provider, Certificate Authority Proxy Function, SIP and SNMP Trap.

The vulnerabilities affect a wide range of models across versions 4,5 and 6. Unified Communications Manager Express - the call handling software embedded in Cisco's Integrated Services Routers (ISRs) which is often used in branch office locations - is not affected.

Separately, Cisco has revealed three denial of service vulnerabilities which could take down its presence software. The company has made patches available.

Secure Computing Magazine

 
Ads by Google
Thoughts on this article? Add a comment below.
Be the first to comment on this article.

Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below: