Lucene search

[email protected]NVD:CVE-2011-4597

HistoryDec 15, 2011 - 3:57 a.m.

CVE-2011-4597

2011-12-1503:57:34

CWE-200

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

JSON

The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series of requests.

Affected configurations

NVD

Node

digiumasteriskMatch1.8.0

digiumasteriskMatch1.8.0beta1

digiumasteriskMatch1.8.0beta2

digiumasteriskMatch1.8.0beta3

digiumasteriskMatch1.8.0beta4

digiumasteriskMatch1.8.0beta5

digiumasteriskMatch1.8.0rc2

digiumasteriskMatch1.8.0rc3

digiumasteriskMatch1.8.0rc4

digiumasteriskMatch1.8.0rc5

digiumasteriskMatch1.8.1

digiumasteriskMatch1.8.1rc1

digiumasteriskMatch1.8.1.1

digiumasteriskMatch1.8.1.2

digiumasteriskMatch1.8.2

digiumasteriskMatch1.8.2.1

digiumasteriskMatch1.8.2.2

digiumasteriskMatch1.8.2.3

digiumasteriskMatch1.8.2.4

digiumasteriskMatch1.8.3

digiumasteriskMatch1.8.3rc1

digiumasteriskMatch1.8.3rc2

digiumasteriskMatch1.8.3rc3

digiumasteriskMatch1.8.3.1

digiumasteriskMatch1.8.3.2

digiumasteriskMatch1.8.3.3

digiumasteriskMatch1.8.4

digiumasteriskMatch1.8.4rc1

digiumasteriskMatch1.8.4rc2

digiumasteriskMatch1.8.4rc3

digiumasteriskMatch1.8.4.1

digiumasteriskMatch1.8.4.2

digiumasteriskMatch1.8.4.3

digiumasteriskMatch1.8.4.4

digiumasteriskMatch1.8.5

digiumasteriskMatch1.8.5rc1

digiumasteriskMatch1.8.5.0

digiumasteriskMatch1.8.6.0

digiumasteriskMatch1.8.6.0rc1

digiumasteriskMatch1.8.6.0rc2

digiumasteriskMatch1.8.6.0rc3

digiumasteriskMatch1.8.7.0

digiumasteriskMatch1.8.7.0rc1

digiumasteriskMatch1.8.7.0rc2

digiumasteriskMatch1.8.7.1

Node

digiumasteriskMatch1.6.2.0

digiumasteriskMatch1.6.2.0rc2

digiumasteriskMatch1.6.2.0rc3

digiumasteriskMatch1.6.2.0rc4

digiumasteriskMatch1.6.2.0rc5

digiumasteriskMatch1.6.2.0rc6

digiumasteriskMatch1.6.2.0rc7

digiumasteriskMatch1.6.2.0rc8

digiumasteriskMatch1.6.2.1

digiumasteriskMatch1.6.2.1rc1

digiumasteriskMatch1.6.2.2

digiumasteriskMatch1.6.2.3rc2

digiumasteriskMatch1.6.2.4

digiumasteriskMatch1.6.2.5

digiumasteriskMatch1.6.2.6

digiumasteriskMatch1.6.2.6rc1

digiumasteriskMatch1.6.2.6rc2

digiumasteriskMatch1.6.2.15rc1

digiumasteriskMatch1.6.2.16

digiumasteriskMatch1.6.2.16rc1

digiumasteriskMatch1.6.2.16.1

digiumasteriskMatch1.6.2.16.2

digiumasteriskMatch1.6.2.17

digiumasteriskMatch1.6.2.17rc1

digiumasteriskMatch1.6.2.17rc2

digiumasteriskMatch1.6.2.17rc3

digiumasteriskMatch1.6.2.17.1

digiumasteriskMatch1.6.2.17.2

digiumasteriskMatch1.6.2.17.3

digiumasteriskMatch1.6.2.18

digiumasteriskMatch1.6.2.18rc1

digiumasteriskMatch1.6.2.19

digiumasteriskMatch1.6.2.19rc1

digiumasteriskMatch1.6.2.20

digiumasteriskMatch1.6.2.21

Node

digiumasteriskMatch1.4.0

digiumasteriskMatch1.4.0beta1

digiumasteriskMatch1.4.0beta2

digiumasteriskMatch1.4.0beta3

digiumasteriskMatch1.4.0beta4

digiumasteriskMatch1.4.1

digiumasteriskMatch1.4.2

digiumasteriskMatch1.4.3

digiumasteriskMatch1.4.4

digiumasteriskMatch1.4.5

digiumasteriskMatch1.4.6

digiumasteriskMatch1.4.7

digiumasteriskMatch1.4.7.1

digiumasteriskMatch1.4.8

digiumasteriskMatch1.4.9

digiumasteriskMatch1.4.10

digiumasteriskMatch1.4.10.1

digiumasteriskMatch1.4.11

digiumasteriskMatch1.4.12

digiumasteriskMatch1.4.12.1

digiumasteriskMatch1.4.13

digiumasteriskMatch1.4.14

digiumasteriskMatch1.4.15

digiumasteriskMatch1.4.16

digiumasteriskMatch1.4.16.1

digiumasteriskMatch1.4.16.2

digiumasteriskMatch1.4.17

digiumasteriskMatch1.4.18

digiumasteriskMatch1.4.19

digiumasteriskMatch1.4.19rc1

digiumasteriskMatch1.4.19rc2

digiumasteriskMatch1.4.19rc3

digiumasteriskMatch1.4.19rc4

digiumasteriskMatch1.4.19.1

digiumasteriskMatch1.4.19.2

digiumasteriskMatch1.4.20

digiumasteriskMatch1.4.20rc1

digiumasteriskMatch1.4.20rc2

digiumasteriskMatch1.4.20rc3

digiumasteriskMatch1.4.20.1

digiumasteriskMatch1.4.21

digiumasteriskMatch1.4.21rc1

digiumasteriskMatch1.4.21rc2

digiumasteriskMatch1.4.21.1

digiumasteriskMatch1.4.21.2

digiumasteriskMatch1.4.22

digiumasteriskMatch1.4.22rc1

digiumasteriskMatch1.4.22rc2

digiumasteriskMatch1.4.22rc3

digiumasteriskMatch1.4.22rc4

digiumasteriskMatch1.4.22rc5

digiumasteriskMatch1.4.22.1

digiumasteriskMatch1.4.22.2

digiumasteriskMatch1.4.23

digiumasteriskMatch1.4.23rc1

digiumasteriskMatch1.4.23rc2

digiumasteriskMatch1.4.23rc3

digiumasteriskMatch1.4.23rc4

digiumasteriskMatch1.4.23.1

digiumasteriskMatch1.4.23.2

digiumasteriskMatch1.4.24

digiumasteriskMatch1.4.24rc1

digiumasteriskMatch1.4.24.1

digiumasteriskMatch1.4.25

digiumasteriskMatch1.4.25rc1

digiumasteriskMatch1.4.25.1

digiumasteriskMatch1.4.26

digiumasteriskMatch1.4.26rc1

digiumasteriskMatch1.4.26rc2

digiumasteriskMatch1.4.26rc3

digiumasteriskMatch1.4.26rc4

digiumasteriskMatch1.4.26rc5

digiumasteriskMatch1.4.26rc6

digiumasteriskMatch1.4.26.1

digiumasteriskMatch1.4.26.2

digiumasteriskMatch1.4.26.3

digiumasteriskMatch1.4.27

digiumasteriskMatch1.4.27rc1

digiumasteriskMatch1.4.27rc2

digiumasteriskMatch1.4.27rc3

digiumasteriskMatch1.4.27rc4

digiumasteriskMatch1.4.27rc5

digiumasteriskMatch1.4.27.1

digiumasteriskMatch1.4.28

digiumasteriskMatch1.4.28rc1

digiumasteriskMatch1.4.29

digiumasteriskMatch1.4.29rc1

digiumasteriskMatch1.4.29.1

digiumasteriskMatch1.4.30

digiumasteriskMatch1.4.30rc2

digiumasteriskMatch1.4.30rc3

digiumasteriskMatch1.4.31

digiumasteriskMatch1.4.31rc1

digiumasteriskMatch1.4.31rc2

digiumasteriskMatch1.4.32

digiumasteriskMatch1.4.32rc1

digiumasteriskMatch1.4.33

digiumasteriskMatch1.4.33rc1

digiumasteriskMatch1.4.33rc2

digiumasteriskMatch1.4.33.1

digiumasteriskMatch1.4.34

digiumasteriskMatch1.4.34rc1

digiumasteriskMatch1.4.34rc2

digiumasteriskMatch1.4.35

digiumasteriskMatch1.4.35rc1

digiumasteriskMatch1.4.36

digiumasteriskMatch1.4.36rc1

digiumasteriskMatch1.4.37

digiumasteriskMatch1.4.37rc1

digiumasteriskMatch1.4.38

digiumasteriskMatch1.4.38rc1

digiumasteriskMatch1.4.39

digiumasteriskMatch1.4.39rc1

digiumasteriskMatch1.4.39.1

digiumasteriskMatch1.4.39.2

digiumasteriskMatch1.4.40

digiumasteriskMatch1.4.40rc1

digiumasteriskMatch1.4.40rc2

digiumasteriskMatch1.4.40rc3

digiumasteriskMatch1.4.40.1

digiumasteriskMatch1.4.40.2

digiumasteriskMatch1.4.41

digiumasteriskMatch1.4.41rc1

digiumasteriskMatch1.4.41.1

digiumasteriskMatch1.4.41.2

digiumasteriskMatch1.4.42

digiumasteriskMatch1.4.42rc1

digiumasteriskMatch1.4.42rc2

References

archives.neohapsis.com/archives/bugtraq/2011-12/0151.html

downloads.asterisk.org/pub/security/AST-2011-013.html

lists.digium.com/pipermail/asterisk-dev/2011-November/052191.html

openwall.com/lists/oss-security/2011/12/09/3

openwall.com/lists/oss-security/2011/12/09/4

osvdb.org/77597

secunia.com/advisories/47273

www.debian.org/security/2011/dsa-2367

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

JSON

Related for NVD:CVE-2011-4597

debiancve1 cve1 prion1 securityvulns1 packetstorm1 ubuntucve1 cvelist1 freebsd1 nessus4 openvas6 debian1 osv1 n0where1 fedora1