Re: [PEN-TEST] PBX Security

["Fricke, Gregory D." <Gregory.Fricke () GLOBALINTEGRITY COM>]

There was an article in Phrack (www.phrack.com) Volume Four, Issue
Forty-Four, that discussed the Northern Telecom Meridian SL-1.  It may give
you some good pointers for attacking your PBX.

Greg

~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
Gregory D. Fricke
Senior Security Consultant
Vulnerability Assessment Division
Global Integrity / SAIC
~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~


-----Original Message-----
From: Joe Traietta [mailto:JTraietta () ASAHIBANKNY COM]
Sent: Wednesday, October 04, 2000 10:07 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: PBX Security


I have been asked to perform a security review on the PBX system (NEC NEAX
2000 IVS) at my company.  I have virtually no PBX experience, so I was
hoping somebody could point me to a good resource, or pass along some
personal experience about reviewing / auditing a PBX system.

Thank you.

Joseph Traietta
Data Security Officer
Asahi Bank, New York Branch