[asterisk-bugs] [Asterisk 0011898]: DIAL option 'T' still has a bad behaviour

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=11898 
====================================================================== 
Reported By:                sergee
Assigned To:                otherwiseguy
====================================================================== 
Project:                    Asterisk
Issue ID:                   11898
Category:                   Resources/res_features
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     assigned
Asterisk Version:           1.4.19 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             02-01-2008 02:17 CST
Last Modified:              05-28-2008 17:50 CDT
====================================================================== 
Summary:                    DIAL option 'T' still has a bad behaviour
Description: 
This is a reminder to myself and to anybody who is interested.

we fixed bugs 7904, 9565, 10198, 10897 only for 't' option. 'T' option
still has a security issues and should be fixed.
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0007904 [patch] Transfer capability is inherite...
related to          0009565 Unparked caller has ability to transfer
related to          0010198 Important vulnerability after native tr...
related to          0010897 Parked call inherits transfer capability
====================================================================== 

---------------------------------------------------------------------- 
 otherwiseguy - 05-28-08 17:50  
---------------------------------------------------------------------- 
For anyone else and just to document, this only actually happens if you do
an asterisk built-in attended transfer--it doesn't happen with blind
transfer or SIP native transfers, etc. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
05-28-08 17:50  otherwiseguy   Note Added: 0087473                          
======================================================================