Lucene search
MitreCVELIST:CVE-2011-2536HistoryJul 06, 2011 - 7:00 p.m.
CVE-2011-2536
2011-07-0619:00:00
mitre
raw.githubusercontent.com
1
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x before 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid SIP requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests.
Related
securityvulns
securityvulns
AST-2011-011: Possible enumeration of SIP users due to differing authentication responses
2011-07-04 00:00:00
Asterisk user account enumeration
2011-07-04 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2276-2)
2011-08-03 00:00:00
FreeBSD Ports: asterisk14
2011-08-03 00:00:00
prion
prion
Code injection
2011-07-06 19:55:00
Default configuration
2011-07-06 19:55:00
debiancve
debiancve
CVE-2011-2536
2011-07-06 19:55:03
CVE-2011-2666
2011-07-06 19:55:03
ubuntucve
ubuntucve
CVE-2011-2536
2011-07-06 00:00:00
CVE-2011-2666
2011-07-06 00:00:00
cve
cve
CVE-2011-2536
2011-07-06 19:55:03
nessus
nessus
Asterisk Invalid INVITE / REGISTER SIP Request Username Enumeration (AST-2011-011)
2011-11-22 00:00:00
FreeBSD : Asterisk -- multiple vulnerabilities (40544e8c-9f7b-11e0-9bec-6c626dd55a41)
2011-06-27 00:00:00
GLSA-201110-21 : Asterisk: Multiple vulnerabilities
2011-10-25 00:00:00
n0where
n0where
Node.js VoIP penetration testing framework : Bluebox-ng
2017-11-14 16:01:19
cvelist
cvelist
CVE-2011-2666
2011-07-06 19:00:00
freebsd
freebsd
Asterisk -- multiple vulnerabilities
2011-06-24 00:00:00
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2011-10-24 00:00:00