Internet Telephony Product of the Year

Black Hat Highlights VoIP Vulnerabilities

VoIP News, Aug 07, 2007

A keynote given by security researchers from iSec Partners at the Black Hat conference in Las Vegas has shown exploits capable of compromising H.232 and IAX with the group also posting tools on its website which demonstrate the crack.

SIP got its share of criticism though also. According to this report a personal computer with a SIP-based softphone can be compromised with a buffer overflow attack.

A technique outlined by researchers at Sipera Systems injected an executable during a SIP-initiated call was compromised the attacker would then be at liberty to access information on the target PC or even to gain access to data resources within an enterprise.
 

Unified Communications Unleashed
Sipera Systems is the worldwide market leader in solutions for the rapid and simple adoption of Unified Communications (UC). Thousands of users around the globe rely on Sipera to secure VoIP, IP video, collaboration, messaging and dozens of other high-performance applications. Sipera’s groundbreaking “Borderless UC” enables controlled communications to any device in any location.

Years of UC Security experience is contained in Sipera unified communications (UC-Sec) products. These appliances benefit from the research conducted by Sipera VIPER Lab to provide comprehensive threat protection, policy enforcement, access control, and privacy in a single, real-time appliance.

© Copyright 2006-2010 Sipera Systems, Inc. All rights reserved. Sipera, Sipera UC-Sec and related products, Sipera LAVA and Sipera VIPER and related services are trademarks of Sipera Systems, Inc.