QueueMetrics forum

QueueMetrics => QueueMetrics news => Topic started by: QueueMetrics on February 17, 2010, 10:18:47

Title: [OT] Asterisk security alert
Post by: QueueMetrics on February 17, 2010, 10:18:47

Hello everyone,
this is not exactly related to QueueMetrics, but being an important Asterisk issue, we are posting it here.

Many VoIP protocols support a large character set, that may cause harm in your dialplan

You need to change entries that look like:

Code: [Select]

[incoming-from-voip]
exten => _X., 1, dial(SIP/${EXTEN})

See http://lists.digium.com/pipermail/asterisk-users/2010-February/244721.html
See also: http://www.asterisk.org