The presentation outlines classes of bugs present in SIP based VoIP installations.Each class is depicted by a sample attack exploiting one SIP-feature at a time.Attacks include an amplification attack, end user device exploitation as well as the always practical Caller-ID spoofing.