<div dir="ltr">Secure unless you have physical access to the device and you're able to make your own root user account on the device...<br><br><br><br><div class="gmail_quote">2008/8/28 Philip Walenta <span dir="ltr"><<a href="mailto:pwalenta@wi.rr.com">pwalenta@wi.rr.com</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">The RHEL3 that Cisco uses is hardened. They also run CSA (Cisco security<br>
agent) on the appliance. It's a very tough box to crack. I believe the<br>
only things found to date have been various buffer/stack overflows when<br>
targeting specific fields in SIP and SCCP.<br>
<br>
In short it is a pretty darn secure system.<br>
<div><div></div><div class="Wj3C7c"><br>
-----Original Message-----<br>
From: <a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a><br>
[mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a>] On Behalf Of<br>
<a href="mailto:A.L.M.Buxey@lboro.ac.uk">A.L.M.Buxey@lboro.ac.uk</a><br>
Sent: Thursday, August 28, 2008 3:36 AM<br>
To: Voice Noob<br>
Cc: <a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
Subject: Re: [cisco-voip] CUCM6 linux distro<br>
<br>
Hi,<br>
> Database is informix. Distro is RHEL.<br>
> Why does it matter what they are. It is an appliance and the give you<br>
> the tools t<br>
<br>
security would be the obvious answer. is the distro and packages up to date<br>
- what services does it run, are they listening on any ports, is there a<br>
firewall used to protect listening ports or are services carefully<br>
configured to negate this.<br>
are default or known username/passwords on the system..hardcoded<br>
dbadmin/dbpass, for example. in 'ye olde days' when an applicance was coded<br>
for its purpose..didnt matter as much. now, when appliances are based on<br>
Linux, Windows (or OSX!) these things are of a major concern...you have a<br>
fully operational system that, if compromised would/could give enhanced<br>
access to the network and other systems..<br>
but also then be subverted for free trunk calls to south asia or greenland<br>
etc.<br>
<br>
alan<br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</div></div></blockquote></div><br></div>