Internet Telephony Product of the Year

Black Hat Highlights VoIP Vulnerabilities

VoIP News, Aug 07, 2007

A keynote given by security researchers from iSec Partners at the Black Hat conference in Las Vegas has shown exploits capable of compromising H.232 and IAX with the group also posting tools on its website which demonstrate the crack.

SIP got its share of criticism though also. According to this report a personal computer with a SIP-based softphone can be compromised with a buffer overflow attack.

A technique outlined by researchers at Sipera Systems injected an executable during a SIP-initiated call was compromised the attacker would then be at liberty to access information on the target PC or even to gain access to data resources within an enterprise.
 

UC Security Defined
Sipera Systems, the leader in real-time Unified Communications (UC) security, is the choice of enterprises and service providers around the world to support their mission-critical UC deployments.
Sipera offers groundbreaking, production-proven solutions that secure voice, video, messaging, collaboration, and other real-time communications in converged IP networks, boosting compliance with information security requirements.
Backed by the industry-leading research of the VIPER lab, Sipera's solutions provide comprehensive threat protection, policy enforcement, access control, and encryption in a single flexible appliance.

© Copyright 2010 Sipera Systems, Inc. All rights reserved. Sipera, Sipera UC-Sec and related products, SLiC, Sipera LAVA and Sipera VIPER are trademarks of Sipera Systems, Inc.