Beveiligingsadvies

CVE-2011-2666

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-07-06 19:00:00

Laatst bijgewerkt 2024-08-06 23:08:23

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote attackers to enumerate account names by making a series of invalid SIP requests and observing the differences in the responses for different usernames, a different vulnerability than CVE-2011-2536.

← Alle CVE's bekijken Bekijk op cve.org ↗