UGN Security
Posted By: sinetific accessing sprint voicemail boxes - 01/23/06 03:46 AM
While setting up an asterisk pbx, I found out that Sprint has really shitty authentication for accessing thier customers voicemail boxes. Basically, if you can spoof your caller ID number to be the number of the voicemail box you want to access, it will dump you right into the users new messages. This will only work if they don't have thier box protected by thier pin which is an option Sprint customers can turn on, but I don't think it's a default.
Posted By: Jaspel Re: accessing sprint voicemail boxes - 01/27/06 08:01 AM
To my understanding you must call from within the network in order for the caller-id authentication to work, making things like Asterisk useless, wich can manipulates caller id through voip vulnerabilities. Phone modification could be another story.
© UGN Security Forum