5

CVE-2009-0041

EPSS 0.69%
Veröffentlicht 14.01.2009 23:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 14

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Asterisk ≫ Asterisk Business Edition Version <= b.2.5.2

Asterisk ≫ Asterisk Business Edition Updatebeta8 Version <= c.1.0

Asterisk ≫ Asterisk Business Edition Versiona

Asterisk ≫ Asterisk Business Edition Versionb.1.3.2

Asterisk ≫ Asterisk Business Edition Versionb.1.3.3

Asterisk ≫ Asterisk Business Edition Versionb.2.2.0

Asterisk ≫ Asterisk Business Edition Versionb.2.2.1

Asterisk ≫ Asterisk Business Edition Versionb.2.3.1

Asterisk ≫ Asterisk Business Edition Versionb.2.3.2

Asterisk ≫ Asterisk Business Edition Versionb.2.3.3

Asterisk ≫ Asterisk Business Edition Versionb.2.3.4

Asterisk ≫ Asterisk Business Edition Versionb.2.3.5

Asterisk ≫ Asterisk Business Edition Versionb.2.3.6

Asterisk ≫ Asterisk Business Edition Versionb.2.5.0

Asterisk ≫ Asterisk Business Edition Versionb.2.5.1

Asterisk ≫ Asterisk Business Edition Versionb.2.5.3

Asterisk ≫ Asterisk Business Edition Versionc.1.0 Updatebeta7

Asterisk ≫ Open Source Version <= 1.2.30.4

Asterisk ≫ Open Source Updaterc3 Version <= 1.4.23

Asterisk ≫ Open Source Updaterc1 Version <= 1.6.0.3

Asterisk ≫ Open Source Version1.2.0

Asterisk ≫ Open Source Version1.2.0 Updatebeta1

Asterisk ≫ Open Source Version1.2.0 Updatebeta2

Asterisk ≫ Open Source Version1.2.0 Updaterc1

Asterisk ≫ Open Source Version1.2.0 Updaterc2

Asterisk ≫ Open Source Version1.2.0beta1

Asterisk ≫ Open Source Version1.2.0beta2

Asterisk ≫ Open Source Version1.2.1

Asterisk ≫ Open Source Version1.2.2

Asterisk ≫ Open Source Version1.2.2 Updatenetsec

Asterisk ≫ Open Source Version1.2.3

Asterisk ≫ Open Source Version1.2.3 Updatenetsec

Asterisk ≫ Open Source Version1.2.10

Asterisk ≫ Open Source Version1.2.10 Updatenetsec

Asterisk ≫ Open Source Version1.2.11

Asterisk ≫ Open Source Version1.2.11 Updatenetsec

Asterisk ≫ Open Source Version1.2.12

Asterisk ≫ Open Source Version1.2.12 Updatenetsec

Asterisk ≫ Open Source Version1.2.12.1

Asterisk ≫ Open Source Version1.2.12.1 Updatenetsec

Asterisk ≫ Open Source Version1.2.13

Asterisk ≫ Open Source Version1.2.13 Updatenetsec

Asterisk ≫ Open Source Version1.2.14

Asterisk ≫ Open Source Version1.2.14 Updatenetsec

Asterisk ≫ Open Source Version1.2.15

Asterisk ≫ Open Source Version1.2.15 Updatenetsec

Asterisk ≫ Open Source Version1.2.16

Asterisk ≫ Open Source Version1.2.16 Updatenetsec

Asterisk ≫ Open Source Version1.2.17

Asterisk ≫ Open Source Version1.2.17 Updatenetsec

Asterisk ≫ Open Source Version1.2.18

Asterisk ≫ Open Source Version1.2.18 Updatenetsec

Asterisk ≫ Open Source Version1.2.19

Asterisk ≫ Open Source Version1.2.19 Updatenetsec

Asterisk ≫ Open Source Version1.2.20

Asterisk ≫ Open Source Version1.2.20 Updatenetsec

Asterisk ≫ Open Source Version1.2.21

Asterisk ≫ Open Source Version1.2.21 Updatenetsec

Asterisk ≫ Open Source Version1.2.21.1

Asterisk ≫ Open Source Version1.2.21.1 Updatenetsec

Asterisk ≫ Open Source Version1.2.22

Asterisk ≫ Open Source Version1.2.22 Updatenetsec

Asterisk ≫ Open Source Version1.2.23

Asterisk ≫ Open Source Version1.2.23 Updatenetsec

Asterisk ≫ Open Source Version1.2.24

Asterisk ≫ Open Source Version1.2.24 Updatenetsec

Asterisk ≫ Open Source Version1.2.25

Asterisk ≫ Open Source Version1.2.25 Updatenetsec

Asterisk ≫ Open Source Version1.2.26

Asterisk ≫ Open Source Version1.2.26 Updatenetsec

Asterisk ≫ Open Source Version1.2.26.1

Asterisk ≫ Open Source Version1.2.26.1 Updatenetsec

Asterisk ≫ Open Source Version1.2.26.2

Asterisk ≫ Open Source Version1.2.26.2 Updatenetsec

Asterisk ≫ Open Source Version1.2.27

Asterisk ≫ Open Source Version1.2.28

Asterisk ≫ Open Source Version1.2.29

Asterisk ≫ Open Source Version1.2.30

Asterisk ≫ Open Source Version1.2.30.2

Asterisk ≫ Open Source Version1.2.30.3

Asterisk ≫ Open Source Version1.4.0

Asterisk ≫ Open Source Version1.4.0 Updatebeta2

Asterisk ≫ Open Source Version1.4.0 Updatebeta3

Asterisk ≫ Open Source Version1.4.0 Updatebeta4

Asterisk ≫ Open Source Version1.4.1

Asterisk ≫ Open Source Version1.4.2

Asterisk ≫ Open Source Version1.4.3

Asterisk ≫ Open Source Version1.4.4

Asterisk ≫ Open Source Version1.4.5

Asterisk ≫ Open Source Version1.4.6

Asterisk ≫ Open Source Version1.4.7

Asterisk ≫ Open Source Version1.4.7.1

Asterisk ≫ Open Source Version1.4.8

Asterisk ≫ Open Source Version1.4.9

Asterisk ≫ Open Source Version1.4.10

Asterisk ≫ Open Source Version1.4.10.1

Asterisk ≫ Open Source Version1.4.11

Asterisk ≫ Open Source Version1.4.12

Asterisk ≫ Open Source Version1.4.12.1

Asterisk ≫ Open Source Version1.4.13

Asterisk ≫ Open Source Version1.4.14

Asterisk ≫ Open Source Version1.4.15

Asterisk ≫ Open Source Version1.4.16

Asterisk ≫ Open Source Version1.4.16.1

Asterisk ≫ Open Source Version1.4.16.2

Asterisk ≫ Open Source Version1.4.17

Asterisk ≫ Open Source Version1.4.18

Asterisk ≫ Open Source Version1.4.18.1

Asterisk ≫ Open Source Version1.4.19

Asterisk ≫ Open Source Version1.4.19 Updaterc1

Asterisk ≫ Open Source Version1.4.19 Updaterc2

Asterisk ≫ Open Source Version1.4.19 Updaterc3

Asterisk ≫ Open Source Version1.4.19 Updaterc4

Asterisk ≫ Open Source Version1.4.19.1

Asterisk ≫ Open Source Version1.4.19.2

Asterisk ≫ Open Source Version1.4.20

Asterisk ≫ Open Source Version1.4.20 Updaterc1

Asterisk ≫ Open Source Version1.4.20 Updaterc2

Asterisk ≫ Open Source Version1.4.20 Updaterc3

Asterisk ≫ Open Source Version1.4.21

Asterisk ≫ Open Source Version1.4.21 Updaterc1

Asterisk ≫ Open Source Version1.4.21 Updaterc2

Asterisk ≫ Open Source Version1.4.21.1

Asterisk ≫ Open Source Version1.4.21.2

Asterisk ≫ Open Source Version1.4.22

Asterisk ≫ Open Source Version1.4.22 Updaterc3

Asterisk ≫ Open Source Version1.4.22 Updaterc4

Asterisk ≫ Open Source Version1.4.22.1

Asterisk ≫ Open Source Version1.4.22.2

Asterisk ≫ Open Source Version1.4.23

Asterisk ≫ Open Source Version1.4.23 Updaterc1

Asterisk ≫ Open Source Version1.4.23 Updaterc2

Asterisk ≫ Open Source Version1.4_revision_95946

Asterisk ≫ Open Source Version1.4beta

Asterisk ≫ Open Source Version1.6.0 Updatebeta1

Asterisk ≫ Open Source Version1.6.0 Updatebeta2

Asterisk ≫ Open Source Version1.6.0 Updatebeta3

Asterisk ≫ Open Source Version1.6.0 Updatebeta4

Asterisk ≫ Open Source Version1.6.0 Updatebeta5

Asterisk ≫ Open Source Version1.6.0 Updatebeta7

Asterisk ≫ Open Source Version1.6.0 Updatebeta7.1

Asterisk ≫ Open Source Version1.6.0 Updatebeta8

Asterisk ≫ Open Source Version1.6.0 Updatebeta9

Asterisk ≫ Open Source Version1.6.0 Updaterc4

Asterisk ≫ Open Source Version1.6.0 Updaterc5

Asterisk ≫ Open Source Version1.6.0 Updaterc6

Asterisk ≫ Open Source Version1.6.0.1

Asterisk ≫ Open Source Version1.6.0.2

Asterisk ≫ Open Source Version1.6.0.3

Asterisk ≫ S800i Appliance Version1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.69%	0.693

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://secunia.com/advisories/37677

http://www.debian.org/security/2009/dsa-1952

http://secunia.com/advisories/34982

http://security.gentoo.org/glsa/glsa-200905-01.xml

http://downloads.digium.com/pub/security/AST-2009-001.html

http://secunia.com/advisories/33453

http://securityreason.com/securityalert/4910

http://www.securityfocus.com/archive/1/499884/100/0/threaded

http://www.securityfocus.com/bid/33174

Patch

http://www.securitytracker.com/id?1021549

http://www.vupen.com/english/advisories/2009/0063

https://nvd.nist.gov/vuln/detail/CVE-2009-0041

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0041

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0041

EUVD