CVE-2011-2666

Опубликовано: 06 июл. 2011

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote attackers to enumerate account names by making a series of invalid SIP requests and observing the differences in the responses for different usernames, a different vulnerability than CVE-2011-2536.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:digium:asterisk:1.6.2.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.0:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.0:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.0:rc4:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.0:rc5:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.0:rc6:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.0:rc7:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.0:rc8:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.1:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.3:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.4:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.5:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.6:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.6:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.6:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.15:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.16:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.16:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.16.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.16.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.17:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.17:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.17:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.17:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.17.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.17.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.17.3:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.18:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.18:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.18.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.6.2.18.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.0:beta1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.0:beta2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.0:beta3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.0:beta4:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.6:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.7:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.7.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.8:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.9:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.10:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.10.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.11:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.12:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.12.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.13:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.14:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.15:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.16:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.16.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.16.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.17:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.18:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.19:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.19:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.19:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.19:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.19:rc4:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.19.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.19.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.20:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.20:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.20:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.20:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.20.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.21:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.21:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.21:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.21.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.21.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.22:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.22:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.22:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.22:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.22:rc4:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.22:rc5:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.22.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.22.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.23:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.23:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.23:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.23:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.23:rc4:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.23.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.23.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.24:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.24:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.24.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.25:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.25:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.25.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.26:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.26:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.26:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.26:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.26:rc4:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.26:rc5:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.26:rc6:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.26.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.26.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.26.3:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.27:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.27:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.27:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.27:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.27:rc4:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.27:rc5:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.27.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.28:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.28:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.29:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.29:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.29.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.30:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.30:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.30:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.31:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.31:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.31:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.32:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.32:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.33:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.33:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.33:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.33.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.34:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.34:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.34:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.35:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.35:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.36:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.36:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.37:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.37:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.38:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.38:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.39:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.39:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.39.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.39.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.40:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.40:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.40:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.40:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.40.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.40.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.41:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.41:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.41.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:1.4.41.2:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.0059

Низкий

5 Medium

CVSS2

Дефекты

CWE-16

Связанные уязвимости

CVE-2011-2666

ubuntu

больше 14 лет назад

CVE-2011-2666

debian

больше 14 лет назад

The default configuration of the SIP channel driver in Asterisk Open S ...

GHSA-6w9r-hx89-h863

github

больше 3 лет назад

EPSS

Процентиль: 69%

0.0059

Низкий

5 Medium

CVSS2

Дефекты

CWE-16