[Hugo Boss]

Quintum”s Service Tech sent out the following urgent message on January 14, 2004:

“As we explained 2 days ago, we have seen and heard from many customers where their Tenors are resetting many times for no reason. We had reported at that time that this seems to be some sort of Internet Attack/Worm. Originally we had thought that the attack was coming to the Tenors as an ICMP message. Since then and in further investigation, we find that the attack is actually taking place through the well known H.323 port of 1720. This seems to be a fragmented H.225 message coming in to the Tenor from IP. This vulnerability will affect all VoIP Gateway manufacturers. In the case of the Tenor, it is resetting due to this attack and the number of messages coming in to it.”

[Mambo]

Any solution for this ?

[Noname]

This is not a new issue.

We have some clarent equipment, and for a while it was a full time job to keep hackers from getting into the equipment.

With VPN being a lot cheaper these days, we send a router with VPN to the other end and now have a secure channel end to end.

Will be expensive, but makers of equipment will need to put some VPN service into their routers.

[Author]

Posts