voip security issues

http://www.iiszone.ziffdavis.com/art.../178482_1.aspx

"It's worth noting that since VoIP is a digital emulation of a system
that functions, in part, on old analog rules, it can be attacked in both
modes. The POTS (plain old telephone system) was vulnerable to attack
many ways, for example, through "phreaking," as in the classic story of
the toy whistle that was packaged in boxes of Cap'n Crunch cereal that
could emit a tone that would put the phone in operator mode, at which
point the caller could call anywhere.

"There also are VoIP-specific protocols, such as the ultra-important SIP
(session initiation protocol) architecture, which can have their own
vulnerabilities. These protocols transport over IP networks, typically
in UDP packets, so certain classic networking vulnerabilities may come
into play. VoIP hardware devices, too, may have their own peculiar
vulnerabilities"


How safe is VoIP?

Rick Merrill

Check out this Cisco whitepaper "Security in SIP-Based Networks":
http://www.cisco.com/en/US/tech/tk65...800ae41c.shtml

We're not likely to see another Captain Crunch since SIP and RTP
traffic are separate, but there are other issues.

Thanks,

Thomas
http://www.betterphone.org

Rick Merrill wrote:
>
> How safe is VoIP?

wrote:
> Check out this Cisco whitepaper "Security in SIP-Based Networks":
> http://www.cisco.com/en/US/tech/tk65...800ae41c.shtml

Good lead!

> We're not likely to see another Captain Crunch since SIP and RTP
> traffic are separate, but there are other issues.

"Captain Crunch" ? You mean John Draper, the phreaker?

What are the other issues?