...of-service (DoS) vulnerabilities in the INVITE message processing of many SIP implementations. According to CERTAdvisory CA-2003-06, "Exploitation of these vulnerabilities may result in denial-of-service conditions, service interruptions...
http://www.computerweekly.com/Articles/2007/07/02/225261/SIP-fundamentals.htm
...must be installed on the phone by someone who has physical access to it or by tricking the user into downloading it, the Certadvisory said. PhoneSnoop The creator of PhoneSnoop showed how the free spyware app works in a video on his blog...
http://news.zdnet.co.uk/security/0,1000000189,39843936,00.htm?s_cid=259
...rights reserved worldwide. Page 13 According to CERTAdvisory Number CA-2004-01 (visit the http://www.cert...technical documents, and presents training courses. In the CERTAdvisory referenced above, recommendations are issued to help...
http://www.netclarity.net/NC-VoIP-Whitepaper.pdf