[Major Payne]

Cisco says it is possible to eavesdrop onremote conversations using its VoIP phones, publishes workarounds.

Cisco confirmed it is possible to eavesdrop on remote conversations using Cisco VoIP phones. In its security response, Cisco says: "an attacker with valid Extension Mobility authentication credentials could cause a Cisco Unified IP Phone configured to use the Extension Mobility feature to transmit or receive a Real-Time Transport Protocol (RTP) audio stream."

Details>>.


Ron

[Advertisements]

thats scary. I am forming a theory, tell me what you think. No matter how secure ''it'' is if it is electronic or computer, there is always someone good enough to break through. ????????????

[Cold Titanium]

thats scary. I am forming a theory, tell me what you think. No matter how secure ''it'' is if it is electronic or computer, there is always someone good enough to break through. ????????????

[Major Payne]

You got it. If man put it together, man can take it apart. Consider nothing secure, but don't be paranoid over it.

Ron

[Cold Titanium]

Consider nothing secure, but don't be paranoid over it

Yeah I agree.

Edited by Krusha, 06 December 2007 - 05:00 PM.

[Tal]

Meh, I don't use VOiP at all, I always chat on MSN

[Major Payne]

VoIP and chatting on MSN aren't related, but good to know you don't have VoIP installed.

Ron

[Tal]

I said that in the sense that I don't like talking over the phone My voice is too creepy anyway.

[jrsReign]

Cisco accepted it is accessible to eavesdrop on limited conversations application Cisco VoIP phones. In its aegis response, Cisco says: "an antagonist with accurate Extension Mobility affidavit accreditation could could cause a Cisco Unified IP Phone configured to use the Extension Mobility affection to address or accept a Real-Time Transport Protocol (RTP) audio stream."

Edited by jrsReign, 04 June 2009 - 05:37 AM.

[diabillic]

Cisco phones are such a pain to setup but once they are its so easy to maintain. I think it was just a matter of time before someone "discovered" a way to do this and blow the whistle. I don't think SIP packets are encrypted, which would make man in the middle all the more easier.