You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Richard Mudgett 81ac32a85f AST-2018-008: Fix enumeration of endpoints from ACL rejected addresses. ... When endpoint specific ACL rules block a SIP request they respond with a 403 forbidden. However, if an endpoint is not identified then a 401 unauthorized response is sent. This vulnerability just discloses which requests hit a defined endpoint. The ACL rules cannot be bypassed to gain access to the disclosed endpoints. * Made endpoint specific ACL rules now respond with a 401 unauthorized which is the same as if an endpoint were not identified. The fix is accomplished by replacing the found endpoint with the artificial endpoint which always fails authentication. ASTERISK-27818 Change-Id: Icb275a54ff8e2df6c671a6d9bda37b5d732b3b32		7 years ago
..
include	pjsip: Rewrite OPTIONS support with new eyes.	7 years ago
config_auth.c	Remove redundant module checks and references.	7 years ago
config_domain_aliases.c	res_pjsip/config_domain_aliases.c: Add check for missing domain.	7 years ago
config_global.c	res_pjsip: Add ignore_uri_user_options option.	9 years ago
config_system.c	res_pjsip.c: Split ast_sip_push_task_synchronous() to fit expectations.	7 years ago
config_transport.c	pjsip: Increase maximum number of usable ciphers & other cleanups	7 years ago
location.c	pjsip: Rewrite OPTIONS support with new eyes.	7 years ago
pjsip_cli.c	pjsip: Improve CLI completion performance	8 years ago
pjsip_configuration.c	pjsip: Rewrite OPTIONS support with new eyes.	7 years ago
pjsip_distributor.c	AST-2018-008: Fix enumeration of endpoints from ACL rejected addresses.	7 years ago
pjsip_global_headers.c	Remove redundant module checks and references.	7 years ago
pjsip_message_filter.c	Remove redundant module checks and references.	7 years ago
pjsip_options.c	Merge "pjsip_options: handle modification of qualify options in realtime"	7 years ago
pjsip_resolver.c	Fix GCC 8 build issues.	7 years ago
pjsip_scheduler.c	Merge "pjsip_scheduler.c: Add ability to trace scheduled tasks."	7 years ago
pjsip_session.c	Remove redundant module checks and references.	7 years ago
pjsip_transport_events.c	pjsip_transport_events.c: Fix crash using stale transport pointer.	7 years ago
pjsip_transport_management.c	AST-2018-005: res_pjsip_transport_management: Move to core	7 years ago
presence_xml.c	res_pjsip_pidf_eyebeam_body_supplement: Correct status presentation	8 years ago
security_events.c	security-events: Fix SuccessfulAuth using_password declaration.	8 years ago