CVE-2009-3727

CVE-2009-3727 affects Asterisk Open Source (various 1.2.x, 1.4.x, 1.6.x lineages; Business Edition; AsteriskNOW; s800i). Root cause: different error messages for valid/invalid SIP usernames via crafted REGISTER messages, enabling remote username enumeration via inconsistent To header URI and Dige...

CVE-2009-3727

Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error message...

CVE-2009-3727: Exposure of Sensitive Information to an Unauthorized Actor

Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error message...

Asterisk SIP Response Username Enumeration Remote Information Disclosure Vulnerability (AST-2009-008)

Asterisk is prone to an information disclosure vulnerability because it doesn SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Asterisk multiple security vulnerabilities

Information leak, crossite scripting...

AST-2009-009: Cross-site AJAX request vulnerability

Asterisk Project Security Advisory - AST-2009-009 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Cross-site AJAX request vulnerability |...

AST-2009-008: SIP responses expose valid usernames

Asterisk Project Security Advisory - AST-2009-008 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | SIP responses expose valid usernames |...

Asterisk protection bypass

ACL restrictions were not applied to SIP INVITE messages...

AST-2009-007: ACL not respected on SIP INVITE

Asterisk Project Security Advisory - AST-2009-007 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | ACL not respected on SIP INVITE |...

Asterisk Missing ACL Check Remote Security Bypass Vulnerability (AST-2009-007)

Asterisk is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...

Digium Asterisk SIP Invalid Response Code Denial of Service (CVE-2007-1594)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

Fedora Core 10 FEDORA-2009-9374 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-9374. OpenVAS Vulnerability Test $Id: fcore20099374.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9374 asterisk Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora 11 : asterisk-1.6.1.6-1.fc11 (2009-9405)

Update to 1.6.1.6 to fix many bugs... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora Core 10 FEDORA-2009-9374 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-9374. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora 10 : asterisk-1.6.0.15-1.fc10 (2009-9374)

Update to 1.6.0.15 to fix many bugs... Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora Core 11 FEDORA-2009-9405 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-9405. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 11 FEDORA-2009-9405 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-9405. OpenVAS Vulnerability Test $Id: fcore20099405.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9405 asterisk Authors: Thomas Reinke Copyright: Copyright c 2009...

[SECURITY] Fedora 11 Update: asterisk-1.6.1.6-1.fc11

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

[SECURITY] Fedora 10 Update: asterisk-1.6.0.15-1.fc10

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Asterisk IAX2 Call Number Exhaustion DOS Vulnerability (AST-2009-006)

Asterisk is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...