search

hushuitian / rfc5766-turn-server

Automatically exported from code.google.com/p/rfc5766-turn-server
0 stars 0 forks source link

TURN permission are not checked properly on the UDP relay side #95

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
At some point, in 3.x versions the TURN permissions check was broken.
UDP relay always allows a peer to send a message to the TURN client, even if 
the peer has no permissions. This is not a big security risk because the client 
receives the IP address of the peer so it is able to ignore stray messages, but 
it may be a problem for a "naive" client.

Original issue reported on code.google.com by mom040...@gmail.com on 24 Jan 2014 at 8:55

GoogleCodeExporter commented 9 years ago 
Fixed in 3.2.2.3

Original comment by mom040...@gmail.com on 24 Jan 2014 at 8:56