Asterisk security : ACL not respected on SIP INVITE
A missing ACL check for handling SIP INVITEs allows a device to make calls on networks intended to be prohibited as defined by the “deny” and “permit” lines in sip.conf. The ACL check for handling SIPĀ registrations was not affected.
http://www.asterisk.org/security
October 26, 2009 | Filed Under Tricks
Comments
Leave a Reply