CVE-2009-0041

EPSS 2.72%
Veröffentlicht 14.01.2009 23:30:00
Zuletzt bearbeitet 16.06.2026 23:04:09
Erkennungen
Login

IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 14

NVD 150 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Asterisk ≫ Asterisk Business Edition Version <= b.2.5.2

Asterisk ≫ Asterisk Business Edition Update beta8 Version <= c.1.0

Asterisk ≫ Asterisk Business Edition Version a

Asterisk ≫ Asterisk Business Edition Version b.1.3.2

Asterisk ≫ Asterisk Business Edition Version b.1.3.3

Asterisk ≫ Asterisk Business Edition Version b.2.2.0

Asterisk ≫ Asterisk Business Edition Version b.2.2.1

Asterisk ≫ Asterisk Business Edition Version b.2.3.1

Asterisk ≫ Asterisk Business Edition Version b.2.3.2

Asterisk ≫ Asterisk Business Edition Version b.2.3.3

Asterisk ≫ Asterisk Business Edition Version b.2.3.4

Asterisk ≫ Asterisk Business Edition Version b.2.3.5

Asterisk ≫ Asterisk Business Edition Version b.2.3.6

Asterisk ≫ Asterisk Business Edition Version b.2.5.0

Asterisk ≫ Asterisk Business Edition Version b.2.5.1

Asterisk ≫ Asterisk Business Edition Version b.2.5.3

Asterisk ≫ Asterisk Business Edition Version c.1.0 Update beta7

Asterisk ≫ Open Source Version <= 1.2.30.4

Asterisk ≫ Open Source Update rc3 Version <= 1.4.23

Asterisk ≫ Open Source Update rc1 Version <= 1.6.0.3

Asterisk ≫ Open Source Version 1.2.0

Asterisk ≫ Open Source Version 1.2.0 Update beta1

Asterisk ≫ Open Source Version 1.2.0 Update beta2

Asterisk ≫ Open Source Version 1.2.0 Update rc1

Asterisk ≫ Open Source Version 1.2.0 Update rc2

Asterisk ≫ Open Source Version 1.2.0beta1

Asterisk ≫ Open Source Version 1.2.0beta2

Asterisk ≫ Open Source Version 1.2.1

Asterisk ≫ Open Source Version 1.2.2

Asterisk ≫ Open Source Version 1.2.2 Update netsec

Asterisk ≫ Open Source Version 1.2.3

Asterisk ≫ Open Source Version 1.2.3 Update netsec

Asterisk ≫ Open Source Version 1.2.10

Asterisk ≫ Open Source Version 1.2.10 Update netsec

Asterisk ≫ Open Source Version 1.2.11

Asterisk ≫ Open Source Version 1.2.11 Update netsec

Asterisk ≫ Open Source Version 1.2.12

Asterisk ≫ Open Source Version 1.2.12 Update netsec

Asterisk ≫ Open Source Version 1.2.12.1

Asterisk ≫ Open Source Version 1.2.12.1 Update netsec

Asterisk ≫ Open Source Version 1.2.13

Asterisk ≫ Open Source Version 1.2.13 Update netsec

Asterisk ≫ Open Source Version 1.2.14

Asterisk ≫ Open Source Version 1.2.14 Update netsec

Asterisk ≫ Open Source Version 1.2.15

Asterisk ≫ Open Source Version 1.2.15 Update netsec

Asterisk ≫ Open Source Version 1.2.16

Asterisk ≫ Open Source Version 1.2.16 Update netsec

Asterisk ≫ Open Source Version 1.2.17

Asterisk ≫ Open Source Version 1.2.17 Update netsec

Asterisk ≫ Open Source Version 1.2.18

Asterisk ≫ Open Source Version 1.2.18 Update netsec

Asterisk ≫ Open Source Version 1.2.19

Asterisk ≫ Open Source Version 1.2.19 Update netsec

Asterisk ≫ Open Source Version 1.2.20

Asterisk ≫ Open Source Version 1.2.20 Update netsec

Asterisk ≫ Open Source Version 1.2.21

Asterisk ≫ Open Source Version 1.2.21 Update netsec

Asterisk ≫ Open Source Version 1.2.21.1

Asterisk ≫ Open Source Version 1.2.21.1 Update netsec

Asterisk ≫ Open Source Version 1.2.22

Asterisk ≫ Open Source Version 1.2.22 Update netsec

Asterisk ≫ Open Source Version 1.2.23

Asterisk ≫ Open Source Version 1.2.23 Update netsec

Asterisk ≫ Open Source Version 1.2.24

Asterisk ≫ Open Source Version 1.2.24 Update netsec

Asterisk ≫ Open Source Version 1.2.25

Asterisk ≫ Open Source Version 1.2.25 Update netsec

Asterisk ≫ Open Source Version 1.2.26

Asterisk ≫ Open Source Version 1.2.26 Update netsec

Asterisk ≫ Open Source Version 1.2.26.1

Asterisk ≫ Open Source Version 1.2.26.1 Update netsec

Asterisk ≫ Open Source Version 1.2.26.2

Asterisk ≫ Open Source Version 1.2.26.2 Update netsec

Asterisk ≫ Open Source Version 1.2.27

Asterisk ≫ Open Source Version 1.2.28

Asterisk ≫ Open Source Version 1.2.29

Asterisk ≫ Open Source Version 1.2.30

Asterisk ≫ Open Source Version 1.2.30.2

Asterisk ≫ Open Source Version 1.2.30.3

Asterisk ≫ Open Source Version 1.4.0

Asterisk ≫ Open Source Version 1.4.0 Update beta2

Asterisk ≫ Open Source Version 1.4.0 Update beta3

Asterisk ≫ Open Source Version 1.4.0 Update beta4

Asterisk ≫ Open Source Version 1.4.1

Asterisk ≫ Open Source Version 1.4.2

Asterisk ≫ Open Source Version 1.4.3

Asterisk ≫ Open Source Version 1.4.4

Asterisk ≫ Open Source Version 1.4.5

Asterisk ≫ Open Source Version 1.4.6

Asterisk ≫ Open Source Version 1.4.7

Asterisk ≫ Open Source Version 1.4.7.1

Asterisk ≫ Open Source Version 1.4.8

Asterisk ≫ Open Source Version 1.4.9

Asterisk ≫ Open Source Version 1.4.10

Asterisk ≫ Open Source Version 1.4.10.1

Asterisk ≫ Open Source Version 1.4.11

Asterisk ≫ Open Source Version 1.4.12

Asterisk ≫ Open Source Version 1.4.12.1

Asterisk ≫ Open Source Version 1.4.13

Asterisk ≫ Open Source Version 1.4.14

Asterisk ≫ Open Source Version 1.4.15

Asterisk ≫ Open Source Version 1.4.16

Asterisk ≫ Open Source Version 1.4.16.1

Asterisk ≫ Open Source Version 1.4.16.2

Asterisk ≫ Open Source Version 1.4.17

Asterisk ≫ Open Source Version 1.4.18

Asterisk ≫ Open Source Version 1.4.18.1

Asterisk ≫ Open Source Version 1.4.19

Asterisk ≫ Open Source Version 1.4.19 Update rc1

Asterisk ≫ Open Source Version 1.4.19 Update rc2

Asterisk ≫ Open Source Version 1.4.19 Update rc3

Asterisk ≫ Open Source Version 1.4.19 Update rc4

Asterisk ≫ Open Source Version 1.4.19.1

Asterisk ≫ Open Source Version 1.4.19.2

Asterisk ≫ Open Source Version 1.4.20

Asterisk ≫ Open Source Version 1.4.20 Update rc1

Asterisk ≫ Open Source Version 1.4.20 Update rc2

Asterisk ≫ Open Source Version 1.4.20 Update rc3

Asterisk ≫ Open Source Version 1.4.21

Asterisk ≫ Open Source Version 1.4.21 Update rc1

Asterisk ≫ Open Source Version 1.4.21 Update rc2

Asterisk ≫ Open Source Version 1.4.21.1

Asterisk ≫ Open Source Version 1.4.21.2

Asterisk ≫ Open Source Version 1.4.22

Asterisk ≫ Open Source Version 1.4.22 Update rc3

Asterisk ≫ Open Source Version 1.4.22 Update rc4

Asterisk ≫ Open Source Version 1.4.22.1

Asterisk ≫ Open Source Version 1.4.22.2

Asterisk ≫ Open Source Version 1.4.23

Asterisk ≫ Open Source Version 1.4.23 Update rc1

Asterisk ≫ Open Source Version 1.4.23 Update rc2

Asterisk ≫ Open Source Version 1.4_revision_95946

Asterisk ≫ Open Source Version 1.4beta

Asterisk ≫ Open Source Version 1.6.0 Update beta1

Asterisk ≫ Open Source Version 1.6.0 Update beta2

Asterisk ≫ Open Source Version 1.6.0 Update beta3

Asterisk ≫ Open Source Version 1.6.0 Update beta4

Asterisk ≫ Open Source Version 1.6.0 Update beta5

Asterisk ≫ Open Source Version 1.6.0 Update beta7

Asterisk ≫ Open Source Version 1.6.0 Update beta7.1

Asterisk ≫ Open Source Version 1.6.0 Update beta8

Asterisk ≫ Open Source Version 1.6.0 Update beta9

Asterisk ≫ Open Source Version 1.6.0 Update rc4

Asterisk ≫ Open Source Version 1.6.0 Update rc5

Asterisk ≫ Open Source Version 1.6.0 Update rc6

Asterisk ≫ Open Source Version 1.6.0.1

Asterisk ≫ Open Source Version 1.6.0.2

Asterisk ≫ Open Source Version 1.6.0.3

Asterisk ≫ S800i Appliance Version 1.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.72%	0.841

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://secunia.com/advisories/37677

http://www.debian.org/security/2009/dsa-1952

http://secunia.com/advisories/34982

http://security.gentoo.org/glsa/glsa-200905-01.xml

http://downloads.digium.com/pub/security/AST-2009-001.html

http://secunia.com/advisories/33453

http://securityreason.com/securityalert/4910

http://www.securityfocus.com/archive/1/499884/100/0/threaded

http://www.securityfocus.com/bid/33174

Patch

http://www.securitytracker.com/id?1021549

http://www.vupen.com/english/advisories/2009/0063

https://nvd.nist.gov/vuln/detail/CVE-2009-0041

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0041

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0041

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-0041