VoIPShield Releases Extensive List of VoIP Vulnerabilities

VoIPShield recently released an extensive list of VoIP vulnerabilities on their Vulnerabilities Research page. Its a fairly long list. The vulnerabilities are not described in a lot of detail, no exploits are given, nor are any detailed countermeasures described. Some of the vulnerabilities have been addressed by vendors, while others are pending. I will try to review this in more detail in the future. In the meantime, Dan York did a nice review that you can read at:

http://voipsa.org/blog/2008/04/02/voipshield-announces-discovery-of-over-100-vulnerabilities-in-cisco-avaya-nortel-voip-systems/