News / Security
Cisco issues router and VoIP security fixes
On 3 February 2006, Cisco issued security notices for its CallManager internet-telephony software and for certain IOS deployments. The reported CallManager issues included a denial-of-service risk and a privilege-escalation risk under a specific administrative configuration.
Potential effects on voice systems
A successful denial-of-service attack could interrupt phone registration or make phones unresponsive, according to the source. The privilege issue concerned systems using multilevel administration, where a restricted account might obtain wider control. Affected versions were identified in Cisco’s 2006 guidance.
A separate IOS issue
Cisco also addressed a remotely exploitable denial-of-service condition involving Stack Group Bidding Protocol in certain IOS versions. This is a historical security notice, not advice about current exposure. The durable lesson is to match software versions and enabled features to the vendor guidance available for a deployment. Organisations using those releases needed to consult the relevant version-specific notice before acting.