Lucene search

[email protected]NVD:CVE-2011-2666

HistoryJul 06, 2011 - 7:55 p.m.

CVE-2011-2666

2011-07-0619:55:03

CWE-16

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.4%

JSON

The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote attackers to enumerate account names by making a series of invalid SIP requests and observing the differences in the responses for different usernames, a different vulnerability than CVE-2011-2536.

Affected configurations

NVD

Node

digiumasteriskMatch1.6.2.0

digiumasteriskMatch1.6.2.0rc2

digiumasteriskMatch1.6.2.0rc3

digiumasteriskMatch1.6.2.0rc4

digiumasteriskMatch1.6.2.0rc5

digiumasteriskMatch1.6.2.0rc6

digiumasteriskMatch1.6.2.0rc7

digiumasteriskMatch1.6.2.0rc8

digiumasteriskMatch1.6.2.1

digiumasteriskMatch1.6.2.1rc1

digiumasteriskMatch1.6.2.2

digiumasteriskMatch1.6.2.3rc2

digiumasteriskMatch1.6.2.4

digiumasteriskMatch1.6.2.5

digiumasteriskMatch1.6.2.6

digiumasteriskMatch1.6.2.6rc1

digiumasteriskMatch1.6.2.6rc2

digiumasteriskMatch1.6.2.15rc1

digiumasteriskMatch1.6.2.16

digiumasteriskMatch1.6.2.16rc1

digiumasteriskMatch1.6.2.16.1

digiumasteriskMatch1.6.2.16.2

digiumasteriskMatch1.6.2.17

digiumasteriskMatch1.6.2.17rc1

digiumasteriskMatch1.6.2.17rc2

digiumasteriskMatch1.6.2.17rc3

digiumasteriskMatch1.6.2.17.1

digiumasteriskMatch1.6.2.17.2

digiumasteriskMatch1.6.2.17.3

digiumasteriskMatch1.6.2.18

digiumasteriskMatch1.6.2.18rc1

digiumasteriskMatch1.6.2.18.1

digiumasteriskMatch1.6.2.18.2

Node

digiumasteriskMatch1.4.0

digiumasteriskMatch1.4.0beta1

digiumasteriskMatch1.4.0beta2

digiumasteriskMatch1.4.0beta3

digiumasteriskMatch1.4.0beta4

digiumasteriskMatch1.4.1

digiumasteriskMatch1.4.2

digiumasteriskMatch1.4.3

digiumasteriskMatch1.4.4

digiumasteriskMatch1.4.5

digiumasteriskMatch1.4.6

digiumasteriskMatch1.4.7

digiumasteriskMatch1.4.7.1

digiumasteriskMatch1.4.8

digiumasteriskMatch1.4.9

digiumasteriskMatch1.4.10

digiumasteriskMatch1.4.10.1

digiumasteriskMatch1.4.11

digiumasteriskMatch1.4.12

digiumasteriskMatch1.4.12.1

digiumasteriskMatch1.4.13

digiumasteriskMatch1.4.14

digiumasteriskMatch1.4.15

digiumasteriskMatch1.4.16

digiumasteriskMatch1.4.16.1

digiumasteriskMatch1.4.16.2

digiumasteriskMatch1.4.17

digiumasteriskMatch1.4.18

digiumasteriskMatch1.4.19

digiumasteriskMatch1.4.19rc1

digiumasteriskMatch1.4.19rc2

digiumasteriskMatch1.4.19rc3

digiumasteriskMatch1.4.19rc4

digiumasteriskMatch1.4.19.1

digiumasteriskMatch1.4.19.2

digiumasteriskMatch1.4.20

digiumasteriskMatch1.4.20rc1

digiumasteriskMatch1.4.20rc2

digiumasteriskMatch1.4.20rc3

digiumasteriskMatch1.4.20.1

digiumasteriskMatch1.4.21

digiumasteriskMatch1.4.21rc1

digiumasteriskMatch1.4.21rc2

digiumasteriskMatch1.4.21.1

digiumasteriskMatch1.4.21.2

digiumasteriskMatch1.4.22

digiumasteriskMatch1.4.22rc1

digiumasteriskMatch1.4.22rc2

digiumasteriskMatch1.4.22rc3

digiumasteriskMatch1.4.22rc4

digiumasteriskMatch1.4.22rc5

digiumasteriskMatch1.4.22.1

digiumasteriskMatch1.4.22.2

digiumasteriskMatch1.4.23

digiumasteriskMatch1.4.23rc1

digiumasteriskMatch1.4.23rc2

digiumasteriskMatch1.4.23rc3

digiumasteriskMatch1.4.23rc4

digiumasteriskMatch1.4.23.1

digiumasteriskMatch1.4.23.2

digiumasteriskMatch1.4.24

digiumasteriskMatch1.4.24rc1

digiumasteriskMatch1.4.24.1

digiumasteriskMatch1.4.25

digiumasteriskMatch1.4.25rc1

digiumasteriskMatch1.4.25.1

digiumasteriskMatch1.4.26

digiumasteriskMatch1.4.26rc1

digiumasteriskMatch1.4.26rc2

digiumasteriskMatch1.4.26rc3

digiumasteriskMatch1.4.26rc4

digiumasteriskMatch1.4.26rc5

digiumasteriskMatch1.4.26rc6

digiumasteriskMatch1.4.26.1

digiumasteriskMatch1.4.26.2

digiumasteriskMatch1.4.26.3

digiumasteriskMatch1.4.27

digiumasteriskMatch1.4.27rc1

digiumasteriskMatch1.4.27rc2

digiumasteriskMatch1.4.27rc3

digiumasteriskMatch1.4.27rc4

digiumasteriskMatch1.4.27rc5

digiumasteriskMatch1.4.27.1

digiumasteriskMatch1.4.28

digiumasteriskMatch1.4.28rc1

digiumasteriskMatch1.4.29

digiumasteriskMatch1.4.29rc1

digiumasteriskMatch1.4.29.1

digiumasteriskMatch1.4.30

digiumasteriskMatch1.4.30rc2

digiumasteriskMatch1.4.30rc3

digiumasteriskMatch1.4.31

digiumasteriskMatch1.4.31rc1

digiumasteriskMatch1.4.31rc2

digiumasteriskMatch1.4.32

digiumasteriskMatch1.4.32rc1

digiumasteriskMatch1.4.33

digiumasteriskMatch1.4.33rc1

digiumasteriskMatch1.4.33rc2

digiumasteriskMatch1.4.33.1

digiumasteriskMatch1.4.34

digiumasteriskMatch1.4.34rc1

digiumasteriskMatch1.4.34rc2

digiumasteriskMatch1.4.35

digiumasteriskMatch1.4.35rc1

digiumasteriskMatch1.4.36

digiumasteriskMatch1.4.36rc1

digiumasteriskMatch1.4.37

digiumasteriskMatch1.4.37rc1

digiumasteriskMatch1.4.38

digiumasteriskMatch1.4.38rc1

digiumasteriskMatch1.4.39

digiumasteriskMatch1.4.39rc1

digiumasteriskMatch1.4.39.1

digiumasteriskMatch1.4.39.2

digiumasteriskMatch1.4.40

digiumasteriskMatch1.4.40rc1

digiumasteriskMatch1.4.40rc2

digiumasteriskMatch1.4.40rc3

digiumasteriskMatch1.4.40.1

digiumasteriskMatch1.4.40.2

digiumasteriskMatch1.4.41

digiumasteriskMatch1.4.41rc1

digiumasteriskMatch1.4.41.1

digiumasteriskMatch1.4.41.2

References

downloads.asterisk.org/pub/security/AST-2011-011.html

exchange.xforce.ibmcloud.com/vulnerabilities/68472

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.4%

JSON

Related for NVD:CVE-2011-2666

prion2 cve2 debiancve2 nessus4 ubuntucve2 cvelist2 openvas9 securityvulns2 nvd1 n0where1 debian1 freebsd1 osv1 gentoo1