<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1170" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Cisco should really be ashamed of this
product...</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>While it is physically well constructed, and has
excellent sound quality along with a very pleasant user interface, the device
has SERIOUS stability issues, unless you run your network with an iron
fist...</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Quite by accident, while configuring my Asterisk
system to connect to a Cisco 7960 via SIP in a standard office PBX type
arrangement, I discovered something interesting...</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>By screwing around with both the source IP address
of a SIP message, along with certain IP addresses in the SIP message itself,
it's quite easy to crash the Cisco.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>In short, it would be trivial to DOS (by
forcing continuous crashes and the subsequent reboots) any Cisco 7960 that you
can route UDP packets to...</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Matt Hardeman<BR>PaperSoft</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>