Flaws Threaten VoIP Networks?

jdkane writes "CNET News reports that security flaws have been found in products that use VoIP and text messaging, including those from Microsoft and Cisco Systems. What's interesting, in Microsoft's case, is that the Internet Security and Acceleration Server product that's also affected is designed to help protect companies' networks from online attacks. Specifically, a filter used in the server that secures VoIP communications is vulnerable to the flaw."

Comments

Imagine That

[somethinghollow]

Imagine that... Microsoft making a product with security flaws! Someone call the press...

Re:Imagine That

[DAldredge]

Since Red Hat is safe and I to take it that SCO is safe also?

Re:Imagine That

[Anonymous Coward]

No, it means that the Open Source products didn't have the advanced features of the closed products.

I can make a mail client that never has a security flaw, either:


#!/bin/sh
PATH=/bin:/usr/bin
less /var/spool/mail/`whoami`


See how that works? No features, no security holes.

A flaw in a Microsoft product?

[caston]

If that's impossible than this isn't slashdot.

Thats nothing

[WillRobinson]

I saw that embeded XP beat out linux for Radio Shacks POS.. Wait tell the hackers get into that system..

Wonder why we are fed-xing all these remote control cars to russia?? Must be popular there..

I can't wait to hack this...

[jasonfncsu]

*manly voice* "Hey baby, do you like it hard?" *sexy voice* "Yeah, like that" *my voice* "How about this: have real sex"

Blah.

[i_am_syco]

Since the whole no-way-Microsoft-would-ever-have-a-security-hole joke has been done to death, I'll do a different one. ... Wait, nothing could be funnier than the irony of someone saying no-security-holes-in-Microsoft-products.

I guess...

[Anonymous Coward]

However, on Microsoft's Internet Security and Acceleration Server 2000, which is included with Small Business Server 2000 and 2003 editions, the vulnerability could allow an attacker to take control of the system.

Well, I guess that rules out the slashdot crowd...I mean, who in their right mind would want to take over a Microsoft computer?

Oh, the horror!

New commercial slogan?

[phaetonic]

*walks and stops in one place* Can you hack me now? ... Good. *walks and stops in one place* Can you hack me now? ... Good.

Re:ISA's Track Record is very bad

[Anonymous Coward]

We place our ISA boxes behind Checkpoint FW1 in their own DMZ. Enlightened or cowardly?

Great opportunity

[Jonboy X]

Cool! Now if you leave voice mail over 2 minutes long, instead of an annoying beep, you get root access!

Love those buffer exploits...

Re:CallManager *IS* being ported to Linux.

[DAldredge]

Since it would have been a Cisco bid, does it run IP over avion RFC 2549?

Re:You linked to Microsoft's patch

[Creepy Crawler]

Here's why we dont consider Linux/Unix:

http://www.despair.com/consulting.html

Simply enough, it doesnt break once you set it up. Windows setups break on a regular basis, and my employers want yet more and more money.

Consulting with the "good old boy" businesses are the hardset to get Linux in.

Re:It's not MS, it's VoIP -- expect more

[PacoTaco]

someone might hack your phone/VoIP endpoint through the encoded voice stream and gain access to your LAN.

Yes! Wardialing is back!