On Mon, 1 Aug 2016 09:08:36 +0100
Nabeel <nabeelshik...@gmail.com> wrote:
> I am using ODBC realtime storage with Asterisk. Currently, with no
> password set, a user can dial the voicemail number to retrieve their

>From their own phone or from any phone?

> I am yet to test this behaviour in Asterisk during the
> Unavailable/Busy message. However, if this is the case, then this
> seems to be an illogical security hole in Asterisk's design. Why does
> Asterisk allow accessing another person's mailbox by pressing the '*'
> key, while listening to *the other person's* unavailable message?

It's not for accessing another person's mailbox.  It's for accessing
your own when you are away from home/office.

-- 
D'Arcy J.M. Cain
System Administrator, Vex.Net
http://www.Vex.Net/ IM:da...@vex.net
VoIP: sip:da...@vex.net

-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to