asterisk allows calls on prohibited networks
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2009-3723 | third party advisory |
https://access.redhat.com/security/cve/cve-2009-3723 | third party advisory broken link |
http://downloads.asterisk.org/pub/security/AST-2009-007.html | vendor advisory |