Lucene search
PRIOn knowledge basePRION:CVE-2011-2536HistoryJul 06, 2011 - 7:55 p.m.
Code injection
2011-07-0619:55:00
PRIOn knowledge base
www.prio-n.com
5
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x before 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid SIP requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests.
Related
openvas
openvas
FreeBSD Ports: asterisk14
2011-08-03 00:00:00
FreeBSD Ports: asterisk14
2011-08-03 00:00:00
securityvulns
securityvulns
AST-2011-011: Possible enumeration of SIP users due to differing authentication responses
2011-07-04 00:00:00
Asterisk user account enumeration
2011-07-04 00:00:00
nvd
nvd
CVE-2011-2536
2011-07-06 19:55:03
CVE-2011-2666
2011-07-06 19:55:03
ubuntucve
ubuntucve
CVE-2011-2536
2011-07-06 00:00:00
CVE-2011-2666
2011-07-06 00:00:00
cvelist
cvelist
CVE-2011-2536
2011-07-06 19:00:00
CVE-2011-2666
2011-07-06 19:00:00
debiancve
debiancve
CVE-2011-2536
2011-07-06 19:55:03
CVE-2011-2666
2011-07-06 19:55:03
cve
cve
CVE-2011-2536
2011-07-06 19:55:03
CVE-2011-2666
2011-07-06 19:55:03
nessus
nessus
Asterisk Invalid INVITE / REGISTER SIP Request Username Enumeration (AST-2011-011)
2011-11-22 00:00:00
FreeBSD : Asterisk -- multiple vulnerabilities (40544e8c-9f7b-11e0-9bec-6c626dd55a41)
2011-06-27 00:00:00
GLSA-201110-21 : Asterisk: Multiple vulnerabilities
2011-10-25 00:00:00
n0where
n0where
Node.js VoIP penetration testing framework : Bluebox-ng
2017-11-14 16:01:19
prion
prion
Default configuration
2011-07-06 19:55:00
freebsd
freebsd
Asterisk -- multiple vulnerabilities
2011-06-24 00:00:00
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2011-10-24 00:00:00