Free Newsletters

   All InfoWorld Newsletters
Geeks in Paradise | Brian Chee » Cisco Security update

February 05, 2007 | Comments: (0)

Cisco Security update

After last week's release of three security advisories, Cisco has again released another security advisory for the SIP protocol. Apparently Cisco IOS devices which supports voice that are not configured for SIP processing will reload if a packet to port 5060 is received. Cisco doesn't know the exact conditions of the flaw but has released an advisory with a work around and patched IOS to fix the problem. If you are wondering, "Is my device vulnerable?", please see the official Cisco advisory. You may not know this, but most Cisco routers have voice capabilities. The SIP functionality is in most basic IOS images. . The last thing you need is a DDoS attack against your main router. The SIP protocol is the defacto standard for VoIP solutions and it could be a simple mis-configuration of a SIP endpoint trying to register to your router that causes it to reload. Security first.

John Jones
q!Bang Solutions, Inc.

Posted by Cynthia Kuo on February 5, 2007 10:12 AM


RATE THIS ARTICLE:





 

  •  
  • COMMENTS





Technology White Papers

 

InfoWorld Technology Marketplace

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
» BUY A LINK NOW

Sponsored Technology Links