Lucene search
MitreCVELIST:CVE-2011-2666HistoryJul 06, 2011 - 7:00 p.m.
CVE-2011-2666
2011-07-0619:00:00
mitre
raw.githubusercontent.com
2
The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote attackers to enumerate account names by making a series of invalid SIP requests and observing the differences in the responses for different usernames, a different vulnerability than CVE-2011-2536.
Related
nessus
nessus
Asterisk Invalid INVITE / REGISTER SIP Request Username Enumeration (AST-2011-011)
2011-11-22 00:00:00
FreeBSD : Asterisk -- multiple vulnerabilities (40544e8c-9f7b-11e0-9bec-6c626dd55a41)
2011-06-27 00:00:00
Debian DSA-2493-1 : asterisk - denial of service
2012-06-29 00:00:00
ubuntucve
ubuntucve
CVE-2011-2666
2011-07-06 00:00:00
CVE-2011-2536
2011-07-06 00:00:00
debiancve
debiancve
CVE-2011-2666
2011-07-06 19:55:03
CVE-2011-2536
2011-07-06 19:55:03
prion
prion
Default configuration
2011-07-06 19:55:00
Code injection
2011-07-06 19:55:00
securityvulns
securityvulns
AST-2011-011: Possible enumeration of SIP users due to differing authentication responses
2011-07-04 00:00:00
Asterisk user account enumeration
2011-07-04 00:00:00
openvas
openvas
FreeBSD Ports: asterisk14
2011-08-03 00:00:00
Debian: Security Advisory (DSA-2276-2)
2011-08-03 00:00:00
cve
cve
CVE-2011-2536
2011-07-06 19:55:03
CVE-2011-2666
2011-07-06 19:55:03
cvelist
cvelist
CVE-2011-2536
2011-07-06 19:00:00
n0where
n0where
Node.js VoIP penetration testing framework : Bluebox-ng
2017-11-14 16:01:19
freebsd
freebsd
Asterisk -- multiple vulnerabilities
2011-06-24 00:00:00
debian
debian
[SECURITY] [DSA 2493-1] asterisk security update
2012-06-12 19:38:06
osv
osv
asterisk - denial of service
2012-06-12 00:00:00
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2011-10-24 00:00:00