● Asterisk X100P FXO ● Helicomm ZigBee Platform ● Home WiFi Networks ● IEEE 802.11 ● New Taiwan Hwa Yao Tek ● NexTone Rental ● RF Linx WLAN Radios ● VoIP PSTN Gateway ● Wi-Fi ● WiMAX ● Wireless ● Wireless security ● WirelessGRID Bridges ● z Links ● Zigbee / IEEE802.15.4

Asterisk Vulnerable To Denial Of Service Attacks

Navigation: Main page

Author: WildC@rd

Internet Security Systems, an internet security vendor, provides a free alert and advisory service called X-Force that has warned of a vulnerability to Denial Of Service (DOS) attacks in older versions of Asterisk and in improperly setup configurations of the latest version. Specifically, hackers could disrupt telephony services at an organization powered by Asterisk by exploiting a possibility in the system for a concerted DOS attack. The vulnerability comes because of a denial of service vulnerability in the Inter-Asterisk eXchange protocol version 2 (IAX2). IAX2 is used by Asterisk PBX software to exchange Voice over IP call setup and call content. If an attacker floods the PBX with call requests, the PBX will be unable to handle new telephone calls. The latest version of Asterisk, version 1.2.10, includes the capability to limit the maximum number of simultaneous unauthenticated calls that can be placed by a single user, which prevents the DOS attack. However, the number of allowed simultaneous calls must be tuned in each installation to be as low as users will accept in order to provide the maximum protection. Internet Security Systems says that the vulnerability can lead to complete denial of office telephone services in environments where Asterisk PBX is in use. The attack could also be launched against IAX2 to PSTN gateways, denying regular telephone services to large numbers of businesses and home users where a service provider is using Asterisk to fulfill calls. Full details of the vulnerability, the solution and information about ISS X-Force alerts can be found here .
Alpha Telecom

Virgin to do UK mobile telly first
Virgin Mobile is on track to launch the UK's first true mobile broadcast TV service, a rebadged vers...

Website reveals mobile phone roaming rates
European mobile operators have launched a new web to give travellers an easy way to determine rates ...

VoIP Services A Better Bet Long Term
Recent research by Juniper Research suggests resellers could do well selling VoIP hardware in the sh...