SecuritySpace - CVE-2011-2536

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2011-2536

Description: chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x before 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid SIP requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests.

Test IDs: 1.3.6.1.4.1.25623.1.0.69996 1.3.6.1.4.1.25623.1.0.900293

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2011-2536
http://www.securitytracker.com/id?1025734

CVE ID:	CVE-2011-2536
Description:	chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x before 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid SIP requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests.
Test IDs:	1.3.6.1.4.1.25623.1.0.69996 1.3.6.1.4.1.25623.1.0.900293
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2536 http://www.securitytracker.com/id?1025734