Asterisk VoIP platform open to DDoS attacks, security firm says - Network World

From Network World: Asterisk VoIP platform open to DDoS attacks, security firm says.

...A vulnerability in the Inter-Asterisk eXchange protocol version 2 (IAX2) — used by Asterisk servers to set up and manage calls — could be used to flood an Asterisk IP PBX with bogus calls and make the phone system unavailable, according to the Internet Security Systems (ISS) X-Force Threat Analysis Service, which discovered the bug.