Skype Security Flaws Discovered

2:26 am on October 26, 2005 | Category: VoIP, Web Services

Skype has just issued security patches for two critical bugs involving their popular internet telephony software. The recently discovered bugs would have made it possible for hackers to run hostile code on computers running vulnerable versions of Skype.

It is very lucky that the Pentest and EADS Corporate Research Center was able to find these particular vulnerabilities, but the potential scope and cross-platform reach of the bugs has some researchers very worried.

“Skype’s ubiquity and the closed nature of their protocol means that all clients are based on the same code. Windows, Linux, business and home users all share the same, equally vulnerable client, a fecund breeding ground for worms and other malicious code,” says SmoothWall product manager, Tom Newton.

As of now there is no known code publicly available to exploit either of these bugs, but users of older Skype versions are being strongly encouraged to download the security patches or update to a later version.

Links: , , , , , .

Related Articles:

    None Found

    1 Comment »

    RSS feed for comments on this post. TrackBack URI

    1. [...] The yakForFree network is powered by CounterPath’s eyeBeam SIP software, and has just been made available at http://www.yakforfree.com. It is similar to Skype and Google Talk in that it allows users to make free internet-based to other users located anywhere in the world. It also includes a video call option. [...]

      Pingback by Another Free Internet Telephony Service Hits the Market » Telecommunications Industry News — November 8, 2005 #

    Leave a comment

    XHTML: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>


    Published by TeleClick Enterprises
    Edited by Jeremy Maddock