diff options
| author | file <file@f38db490-d61c-443f-a65b-d21fe96a405b> | 2009-11-04 19:21:49 +0000 |
|---|---|---|
| committer | file <file@f38db490-d61c-443f-a65b-d21fe96a405b> | 2009-11-04 19:21:49 +0000 |
| commit | 2450986d58b8df6e229a5342b204627d8ca81a53 (patch) | |
| tree | 87e93bc1441bf8c443f8505e0fcfba332a604893 /channels | |
| parent | 5bde712d475868756112212dbae4e232bff750c9 (diff) | |
Merged revisions 227712 via svnmerge from
https://origsvn.digium.com/svn/asterisk/trunk
................
r227712 | file | 2009-11-04 15:20:46 -0400 (Wed, 04 Nov 2009) | 12 lines
Merged revisions 227700 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.4
........
r227700 | file | 2009-11-04 15:17:39 -0400 (Wed, 04 Nov 2009) | 5 lines
Fix a security issue where sending a REGISTER with a differing username in the From
URI and Authorization header would reveal whether it was valid or not.
(AST-2009-008)
........
................
git-svn-id: http://svn.digium.com/svn/asterisk/branches/1.6.0@227717 f38db490-d61c-443f-a65b-d21fe96a405b
Diffstat (limited to 'channels')
| -rw-r--r-- | channels/chan_sip.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/channels/chan_sip.c b/channels/chan_sip.c index 2ea85b40d..b04026a9d 100644 --- a/channels/chan_sip.c +++ b/channels/chan_sip.c @@ -11389,8 +11389,6 @@ static enum check_auth_result register_verify(struct sip_pvt *p, struct sockaddr Asterisk uses the From: username for authentication. We need the users to use the same authentication user name until we support proper authentication by digest auth name */ - transmit_response(p, "403 Authentication user name does not match account name", &p->initreq); - break; case AUTH_NOT_FOUND: case AUTH_PEER_NOT_DYNAMIC: case AUTH_ACL_FAILED: |