Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-4597HistoryDec 15, 2011 - 3:57 a.m.
CVE-2011-4597
2011-12-1503:57:00
Debian Security Bug Tracker
security-tracker.debian.org
9
0.012 Low
EPSS
Percentile
84.8%
The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series of requests.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | asterisk | < 1:1.8.8.0~dfsg-1 | asterisk_1:1.8.8.0~dfsg-1_all.deb |
| Debian | 10 | all | asterisk | < 1:1.8.8.0~dfsg-1 | asterisk_1:1.8.8.0~dfsg-1_all.deb |
| Debian | 999 | all | asterisk | < 1:1.8.8.0~dfsg-1 | asterisk_1:1.8.8.0~dfsg-1_all.deb |
Related
securityvulns
securityvulns
Exploit for Asterisk Security Advisory AST-2011-013
2011-12-26 00:00:00
prion
prion
Code injection
2011-12-15 03:57:00
cve
cve
CVE-2011-4597
2011-12-15 03:57:00
cvelist
cvelist
CVE-2011-4597
2011-12-15 02:00:00
packetstorm
packetstorm
SIP Username Enumerator For Asterisk
2011-12-23 00:00:00
ubuntucve
ubuntucve
CVE-2011-4597
2011-12-15 00:00:00
nessus
nessus
Asterisk Multiple Vulnerabilities (AST-2011-013 / AST-2011-014)
2011-12-14 00:00:00
FreeBSD : asterisk -- Multiple Vulnerabilities (bb389137-21fb-11e1-89b4-001ec9578670)
2011-12-09 00:00:00
Debian DSA-2367-1 : asterisk - several vulnerabilities
2012-01-12 00:00:00
freebsd
freebsd
asterisk -- Multiple Vulnerabilities
2011-12-08 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2367-1)
2012-02-11 00:00:00
FreeBSD Ports: asterisk18
2012-02-13 00:00:00
Debian Security Advisory DSA 2367-1 (asterisk)
2012-02-11 00:00:00
debian
debian
[SECURITY] [DSA 2367-1] asterisk security update
2011-12-19 18:24:08
osv
osv
asterisk - several
2011-12-19 00:00:00
n0where
n0where
Node.js VoIP penetration testing framework : Bluebox-ng
2017-11-14 16:01:19
fedora
fedora
[SECURITY] Fedora 15 Update: asterisk-1.8.10.1-1.fc15
2012-03-31 03:10:13