CVE-2011-4597

The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series ...

CVE-2011-4597

The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series ...

CVE-2011-4597: Exposure of Sensitive Information to an Unauthorized Actor

The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series ...

PT-2011-5003

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.4.x through 1.4.42 Asterisk Open Source versions 1.6.x through 1.6.2.20 Asterisk Open Source versions 1.8.x through 1.8.7.1 Description The issue affects the SIP over UDP implementation, allowing remote attacker...