Support A2Billing :

provided by Star2Billing S.L.

Support A2Billing :
It is currently Wed Apr 26, 2017 5:43 pm
Voice Broadcast System


All times are UTC




Post new topic Reply to topic  [ 19 posts ]  Go to page Previous  1, 2
Author Message
 Post subject: Re: a2billing hacked
PostPosted: Tue Dec 02, 2014 11:54 am 
Offline

Joined: Wed Nov 25, 2009 12:01 pm
Posts: 90
Hi,

limiting the ip from certain countries might help but the underlying security issues remain unsolved, when a hacker could inject some code to credit account without any payment trace or logs. That's the issue need to be solved.


Top
 Profile  
 
 Post subject: Re: a2billing hacked
PostPosted: Tue Dec 02, 2014 3:08 pm 
Offline

Joined: Fri Mar 01, 2013 8:53 pm
Posts: 38
Yes, i agree with you, but since A2billing is opensource, we need to wait till the coders make the changes, in other hand, the solution i gave you will reduce the issue, in my case not all Mexicans know about "How to hack" any kind of servers


Top
 Profile  
 
 Post subject: Re: a2billing hacked
PostPosted: Tue Dec 02, 2014 3:21 pm 
Offline

Joined: Wed Nov 25, 2009 12:01 pm
Posts: 90
Hi,

I have discovered a vulnerability in a2b "DID", via this route the hackers able to add credit and make expensive calls.
i have reported this issue and in the meantime i would advice to disable DID feature till a fix is updated.

limiting the ip provide some protection but this can be bypassed by using proxy or provide a problem for a genuine customer who wish to call via sip dialler from abroad. like you said we need to wait for the a2b team to make some changes to fix the issues.


Update
--------
Areski has done a quick fix

https://github.com/Star2Billing/a2billing/commit/32a23041f2eb56a0c10c95cb75401c2570242de8#diff-1ae57036f1adbada7ed814e8e7da1bc3R77

I recommend everyone to update


Top
 Profile  
 
 Post subject: Re: a2billing hacked
PostPosted: Mon Apr 06, 2015 2:03 pm 
Offline

Joined: Sun Nov 07, 2010 10:00 pm
Posts: 253
rboy22007 wrote:
Update
--------
Areski has done a quick fix

https://github.com/Star2Billing/a2billi ... 7da1bc3R77

I recommend everyone to update


A year ago, I had similar case, they haven't arrived to make nothing, but I took some care for that since that time I haven't got it back... but as I can't reproduce it... don't know really, and never sleep calm...
I have just deployed this proposed changes here... but also, as can't reproduce it, don't know if that really will solve it...
Thanks for sharing and updating...
Regards,


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 19 posts ]  Go to page Previous  1, 2
Hosted Voice Broadcast


All times are UTC


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group