Asterisk security : ACL not respected on SIP INVITE

A missing ACL check for handling SIP INVITEs allows a device to make calls on networks intended to be prohibited as defined by the “deny” and “permit” lines in sip.conf. The ACL check for handling SIPĀ  registrations was not affected.

http://www.asterisk.org/security

Comments

Leave a Reply