[asterisk-dev] asterisk 1.4.1/1.2.16 release question

[Anthony Lamantia]

in the release message mention you guys mention a security vulnerability..

Because of the security vulnerability fix present in this version, all
users of Asterisk 1.4 are urged to update as soon as they can schedule it.

where can i find more information regarding it (protocol, is it a problem
before authentication is required..etc)

thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-dev/attachments/20070303/dc7c0800/attachment.htm