[asterisk-dev] Another IAX2 problem with the latest security fix ...

[Steve Totaro]

On Mon, Jun 2, 2008 at 12:02 PM, Russell Bryant <russell at digium.com> wrote:
> Jay R. Ashworth wrote:
>> This patch is only necessary for systems where IAX traffic is exchanged
>> between machines not under the same administrative span of control,
>> correct?
>
> I'm not exactly sure what you're asking.  This problem potentially
> affects any system using IAX2 with the latest released set of patches to
> address AST-2008-006.
>
> --
> Russell Bryant
> Senior Software Engineer
> Open Source Team Lead
> Digium, Inc.
>

I think he means firewalled and only accessible by machines on the
same network.  I would think that any security issue would not to be
patched if that were the case, unless you have internal hackers.

Thanks,
Steve Totaro