|
 |
|
Cisco IP Phones Design Flaw
|
|
|
|
|
Secunia Advisory:
|
SA7136
|
|
|
Release Date:
|
2002-09-19
|
|
Last Update:
|
2002-09-20
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Security Bypass
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| Software: | Cisco IP Phones 7960
|
|
|
This advisory is currently marked as unpatched!
- Companies can be alerted when a patch is released! |
|
|
Description:
When Cisco designed their IP Phone system, they failed to take into account basic security measures.
There is many fairly easy ways in which one could steal configuration files, administrate phones without authentication, hijack calls, manipulate toll, impersonate others and more.
This is not due to one or a few errors or vulnerabilities, but a basic misunderstanding or lack of knowledge about the need to secure IT infrastructure.
Solution:
There is no simple solution, but a lot of issues to take into consideration if you have or if you plan to implement Cisco IP Phones. For more information we recommend that you read Ofir Arkin's paper about the issues:
http://www.sys-security.com/archive/p...rivial_Cisco_IP_Phones_Compromise.pdf
Provided and/or discovered by:
Ofir Arkin
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
5 Related Secunia Security Advisories
|
|
|
1. Cisco Unified IP Phone Multiple Vulnerabilities
|
|
2. Cisco IP Phone 7940/7960 SIP Message Sequence Denial of Service
|
|
3. Cisco IP Phone 7940/7960 SIP INVITE Denial of Service Vulnerability
|
|
4. Cisco IP Phones SYN Flood Device Reload Vulnerability
|
|
5. Cisco Session Initiation Protocol DoS
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
|
|
Secunia PSI
Scan | Patch | Track
Free Download
|
|
|
Secunia Poll
|
|
|
|
|
 |
|
|
Most Popular Advisories
|
|
|
|
|
|
