Answering Machine Remote Accessibility

Many consumer answering machines have weak security implementations to protect the remote administration of messages they store. Often times, supervisory access can be obtained with a simple selection of keystrokes.

Platforms: AT&T Model 1320 and others
Severity: Users can access supervisory functions

Security Advisory: Answering Machine Remote Accessibility

Originally published as a L0pht Heavy Industries Security Advisory in September 1998.