CVE-2011-4597

The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series ...

OSI Security: Squiz Matrix - User Account Enumeration

Squiz Matrix - User Account Enumeration http://www.osisecurity.com.au/advisories/squiz-matrix-user-enumeration Release Date: 12-Dec-2011 Software: Squiz - Matrix http://www.squiz.net/ "Squiz Matrix delivers highly flexible and robust business integration engine and application development tools. ...

CVE-2011-4678

CVE-2011-4678 affects One Click Orgs prior to version 1.2.3. The password reset feature discloses user existence by returning different error messages for failed reset attempts based on whether an email address is registered. This creates a remote account-enumeration risk via successive reset req...

Nfs-utils 'rusersd' User Enumeration Vulnerability

The RPC rusersd service is prone to a user name enumeration vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Block-Spam-By-Math-Reloaded Plugin Bypass

$Id: wordpressloginenum.rb 12196 2011-04-01 00:51:33Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

WordPress Plugin Block-Spam-By-Math-Reloaded - Bypass

WordPress Plugin Block-Spam-By-Math-Reloaded - Bypass $Id: wordpressloginenum.rb 12196 2011-04-01 00:51:33Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

WordPress Plugin Block-Spam-By-Math-Reloaded - Bypass

$Id: wordpressloginenum.rb 12196 2011-04-01 00:51:33Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

WordPress Block-Spam-By-Math-Reloaded Plugin Bypass

No description provided by source. $Id: wordpressloginenum.rb 12196 2011-04-01 00:51:33Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

Apache "mod_userdir" User Enumeration

Apache with the UserDir directive enabled generates different error codes when a username exists and there is no publichtml directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server. This module requires Metasploit:...

Facebook Mobile User Enumeration

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Facebook doesn't ensures the user information may not be collected by any bot or any automated process. Even though you can protect from this kind of attacks using captchas or tokens security into the forms. Step by step: - - Go to http://m.facebook.c...

Default configuration

The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote attackers to enumerate account names by making a series of invalid SIP requests and observing the...

Trixbox 2.8.0.4 User Enumeration

Trixbox, username enumeration via Flash Operator Panel Fop Author: francesco.tornieri "At" verona-wireless.net Summary: Username enumeration via Flash Operator Panel Fop Reference: http://enablesecurity.com/2011/01/25/voippack-1-4-with-added-support-for-cisco-and-trixbox/ Release Date: 28/06/2011...

Asterisk -- multiple vulnerabilities

The Asterisk Development Team reports: AST-2011-008: If a remote user sends a SIP packet containing a NULL, Asterisk assumes available data extends past the null to the end of the packet when the buffer is actually truncated when copied. This causes SIP header parsing to modify data past the end ...

Nmap NSE net: smb-enum-users

Attempts to enumerate the users on a remote Windows system, with as much information as possible, through two different techniques both over MSRPC, which uses port 445 or 139; see 'smb.lua'. The goal of this script is to discover all user accounts that exist on a remote system. This can be helpfu...

ncp-enum-users NSE Script

Retrieves a list of all eDirectory users from the Novell NetWare Core Protocol NCP service. Example Usage nmap -sV --script=ncp-enum-users Script Output PORT STATE SERVICE REASON 524/tcp open ncp syn-ack | ncp-enum-users: | CN=admin.O=cqure | CN=cawi.OU=finance.O=cqure | CN=linux-l84tadmin.O=cqur...

Asterisk 1.8.4.1 - SIP REGISTER Request User Enumeration

Asterisk 1.8.4.1 - SIP REGISTER Request User Enumeration source: https://www.securityfocus.com/bid/48008/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisk 1.8.4.1...

Asterisk 1.8.4.1 - SIP 'REGISTER' Request User Enumeration

source: https://www.securityfocus.com/bid/48008/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisk 1.8.4.1; other versions may also be affected. REGISTER...

sip-enum-users NSE Script

Enumerates a SIP server's valid extensions users. The script works by sending REGISTER SIP requests to the server with the specified extension and checking for the response status code in order to know if an extension is valid. If a response status code is 401 or 407, it means that the extension ...

SIPDroid user/extension enum

=====Tempest Security Intelligence - Advisory 01/2011 ======================================================================================================================== User enumeration in SIPDroid Agent ---------------------------------- Author: Anibal Vaz Marques de Aguiar anibal.aguiar...

SIPDroid Agent User Enumeration

=====Tempest Security Intelligence - Advisory 01/2011 ======================================================================================================================== User enumeration in SIPDroid Agent ---------------------------------- Author: Anibal Vaz Marques de Aguiar =====Table of...