Implementation of split-header in HMR
Last updated on JULY 04, 2018
Applies to:Acme Packet 4500 - Version S-Cz7.3.0 and later
Information in this document applies to any platform.
Issue : - HMR is not handling the History-info header properly.
history-info contained two URI's for example:
History-Info: "UCC CN"<sip:+email@example.com;user=phone?Reason=SIP;text="Moved Temporarily";cause=302,Diversion;text="unconditional">;index=1;user-id="firstname.lastname@example.org",<sip:+email@example.com;user=phone;cause=302>;index=1.1
The following HMR was used to convert the ips/uri-host to the SIP interface ip-address.
Since the history-info contained two URI as above, the 2nd URI was not converted and it was passed as such and hence exposing the IP from the trusted side to the un-trusted.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
Million Knowledge Articles and hundreds of Community platforms