Fresh VoIP vulnerabilities for 2008

More vulnerabilities, but lower on the critical scale--that seems to be the message emerging from security experts as they look forward to the world of VoIP in 2008. How important are they, and what should you have your security team looking at as we pass through the holidays into the New Year?

You can start with proven vulnerabilities in three of the protocols most frequently used in VoIP: H.323 and Inter Asterisk Exchange can be sniffed during authentication for a nice password reveal, and SIP opens you up to carrying hackers' data for them. Follow up with checking through the released lists of infrastructure component vulnerabilities, and you're on your way.

Want to see where your particular problems might lie? Be sure to check out the tools from VoIPSA--you can bet the hackers are using them already.

For more:
NetworkWorld has the complete article here.

Related articles:
Find straight talk on VoIP security Report
You can find the VoIPSA tools here