CVE-2012-2186

CVE-2012-2186 affects Asterisk Open Source in 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6. The flaw is an incomplete blacklist ...

CVE-2013-2264

CVE-2013-2264 affects the SIP Channel Driver in Asterisk Open Source (1.8.x up to 1.8.20.2, 10.x up to 10.12.2, 11.x up to 11.2.2; Cert. Asterisk 1.8.15 up to 1.8.15-cert2; BE C.3.x up to C.3.8.1; Digiumphones 10.x up to 10.12.2-digiumphones) and enables remote enumeration of account names by obs...