[VOIPSEC] Vulnerabilities in Asterisk

[Vic Cordiano]

fyi...below are articles that you should find useful: 

Article from Asterisk's creator, Mark Spencer, at
http://www.vonmag-digital.com/vonmag/200512/

http://searchenterprisevoice.techtarget.com/tip/1,289483,sid66_gci114554
0,00.html?track=NL-85&ad=535193

<http://searchenterprisevoice.techtarget.com/tip/1,289483,sid66_gci11459
87,00.html?track=NL-85&ad=534748> 

Best regards,
Vic

Victor C. Cordiano, Sr.

Engineer - Bureau of Telecommunications Service Quality, Certification
and Enforcement

Florida Public Service Commission
2540 Shumard Oak Boulevard
Tallahassee, Florida 32399

850-413-6590
850-413-6591 (fax)
vcordian at psc.state.fl.us


-----Original Message-----
From: Voipsec-bounces at voipsa.org [mailto:Voipsec-bounces at voipsa.org] On
Behalf Of Jake Opie
Sent: Tuesday, January 24, 2006 8:22 AM
To: Voipsec at voipsa.org
Subject: [VOIPSEC] Vulnerabilities in Asterisk


Hi,

I am currently reading for my Masters degree in Computer Science and I
am looking at securing softswitches. What I am interested in is the
vulnerabilities found in Asterisk and have been only able to find 5
documented vulnerabilities. Are there more known vulnerabilities than 5?
I am looking for a formal list of these vulnerabilities. 

Below is a link to a pdf that I have written on the vulnerabilities in
Asterisk, SER and OpenH323 GateKeeper:
 
http://jake.rucus.net/Masters/images/stories/summary%20of%20known%20vuln
erab
ilities%20for%20the%20main%20components%20of%20ilanga.pdf

Thanks for the help. 

Jake Opie




_______________________________________________
Voipsec mailing list
Voipsec at voipsa.org
http://voipsa.org/mailman/listinfo/voipsec_voipsa.org