Users of the open-source VOIP software are advised to upgrade Users of the open-source Asterisk VOIP (voice over Internet Protocol) product are advised to upgrade their software following the discovery of two vulnerabilities that could allow attackers to disrupt network service.The Asterisk team released a new version of the product Saturday, which addresses the problems discovered by Internet Security Systems (ISS).Security researchers have been paying more attention to risks in VOIP products as the technology has become more widely used. Over the past few years, ISS began taking a closer look at VOIP security and discovered a number of bugs in such products, said Alain Sergile a technical product manager with ISS. Last year ISS disclosed a flaw in Cisco Systems’ Call Manager VOIP software, he said.With the Asterisk flaws, attackers could simply flood an Asterisk network with call requests, preventing it from handling new call telephone calls, or use an Asterisk-based network to overwhelm a second network with traffic by leveraging Asterisk accounts that contain no passwords, Sergile said.ISS released two advisories, which can be found here. A note on the Asterisk update can be found here. Technology Industry