CVE-2013-2264

EPSS 1.25%
Veröffentlicht 01.04.2013 16:55:03
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits different behavior for invalid INVITE, SUBSCRIBE, and REGISTER transactions depending on whether the user account exists, which allows remote attackers to enumerate account names by (1) reading HTTP status codes, (2) reading additional text in a 403 (aka Forbidden) response, or (3) observing whether certain retransmissions occur.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 235 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Asterisk ≫ Open Source Version 1.8.0

Asterisk ≫ Open Source Version 1.8.0 Update beta1

Asterisk ≫ Open Source Version 1.8.0 Update beta2

Asterisk ≫ Open Source Version 1.8.0 Update beta3

Asterisk ≫ Open Source Version 1.8.0 Update beta4

Asterisk ≫ Open Source Version 1.8.0 Update beta5

Asterisk ≫ Open Source Version 1.8.0 Update rc2

Asterisk ≫ Open Source Version 1.8.0 Update rc3

Asterisk ≫ Open Source Version 1.8.0 Update rc4

Asterisk ≫ Open Source Version 1.8.0 Update rc5

Asterisk ≫ Open Source Version 1.8.1

Asterisk ≫ Open Source Version 1.8.1 Update rc1

Asterisk ≫ Open Source Version 1.8.1.1

Asterisk ≫ Open Source Version 1.8.1.2

Asterisk ≫ Open Source Version 1.8.2

Asterisk ≫ Open Source Version 1.8.2 Update rc1

Asterisk ≫ Open Source Version 1.8.2.1

Asterisk ≫ Open Source Version 1.8.2.2

Asterisk ≫ Open Source Version 1.8.2.3

Asterisk ≫ Open Source Version 1.8.2.4

Asterisk ≫ Open Source Version 1.8.3

Asterisk ≫ Open Source Version 1.8.3 Update rc1

Asterisk ≫ Open Source Version 1.8.3 Update rc2

Asterisk ≫ Open Source Version 1.8.3 Update rc3

Asterisk ≫ Open Source Version 1.8.3.1

Asterisk ≫ Open Source Version 1.8.3.2

Asterisk ≫ Open Source Version 1.8.3.3

Asterisk ≫ Open Source Version 1.8.4

Asterisk ≫ Open Source Version 1.8.4 Update rc1

Asterisk ≫ Open Source Version 1.8.4 Update rc2

Asterisk ≫ Open Source Version 1.8.4 Update rc3

Asterisk ≫ Open Source Version 1.8.4.1

Asterisk ≫ Open Source Version 1.8.4.2

Asterisk ≫ Open Source Version 1.8.4.3

Asterisk ≫ Open Source Version 1.8.4.4

Asterisk ≫ Open Source Version 1.8.5 Update rc1

Asterisk ≫ Open Source Version 1.8.5.0

Asterisk ≫ Open Source Version 1.8.6.0

Asterisk ≫ Open Source Version 1.8.6.0 Update rc1

Asterisk ≫ Open Source Version 1.8.6.0 Update rc2

Asterisk ≫ Open Source Version 1.8.6.0 Update rc3

Asterisk ≫ Open Source Version 1.8.7.0

Asterisk ≫ Open Source Version 1.8.7.0 Update rc1

Asterisk ≫ Open Source Version 1.8.7.0 Update rc2

Asterisk ≫ Open Source Version 1.8.7.1

Asterisk ≫ Open Source Version 1.8.7.2

Asterisk ≫ Open Source Version 1.8.8.0

Asterisk ≫ Open Source Version 1.8.8.0 Update rc1

Asterisk ≫ Open Source Version 1.8.8.0 Update rc2

Asterisk ≫ Open Source Version 1.8.8.0 Update rc3

Asterisk ≫ Open Source Version 1.8.8.0 Update rc4

Asterisk ≫ Open Source Version 1.8.8.0 Update rc5

Asterisk ≫ Open Source Version 1.8.8.1

Asterisk ≫ Open Source Version 1.8.8.2

Asterisk ≫ Open Source Version 1.8.9.0

Asterisk ≫ Open Source Version 1.8.9.0 Update rc1

Asterisk ≫ Open Source Version 1.8.9.0 Update rc2

Asterisk ≫ Open Source Version 1.8.9.0 Update rc3

Asterisk ≫ Open Source Version 1.8.9.1

Asterisk ≫ Open Source Version 1.8.9.2

Asterisk ≫ Open Source Version 1.8.9.3

Asterisk ≫ Open Source Version 1.8.10.0

Asterisk ≫ Open Source Version 1.8.10.0 Update rc1

Asterisk ≫ Open Source Version 1.8.10.0 Update rc2

Asterisk ≫ Open Source Version 1.8.10.0 Update rc3

Asterisk ≫ Open Source Version 1.8.10.0 Update rc4

Asterisk ≫ Open Source Version 1.8.10.1

Asterisk ≫ Open Source Version 1.8.11.0

Asterisk ≫ Open Source Version 1.8.11.0 Update rc2

Asterisk ≫ Open Source Version 1.8.11.0 Update rc3

Asterisk ≫ Open Source Version 1.8.11.1

Asterisk ≫ Open Source Version 1.8.12

Asterisk ≫ Open Source Version 1.8.12.0 Update rc1

Asterisk ≫ Open Source Version 1.8.12.0 Update rc2

Asterisk ≫ Open Source Version 1.8.12.0 Update rc3

Asterisk ≫ Open Source Version 1.8.12.1

Asterisk ≫ Open Source Version 1.8.12.2

Asterisk ≫ Open Source Version 1.8.13.0

Asterisk ≫ Open Source Version 1.8.13.0 Update rc1

Asterisk ≫ Open Source Version 1.8.13.0 Update rc2

Asterisk ≫ Open Source Version 1.8.13.1

Asterisk ≫ Open Source Version 1.8.14.0

Asterisk ≫ Open Source Version 1.8.14.0 Update rc1

Asterisk ≫ Open Source Version 1.8.14.0 Update rc2

Asterisk ≫ Open Source Version 1.8.14.1

Asterisk ≫ Open Source Version 1.8.15.0

Asterisk ≫ Open Source Version 1.8.15.0 Update rc1

Asterisk ≫ Open Source Version 1.8.15.1

Asterisk ≫ Open Source Version 1.8.16.0

Asterisk ≫ Open Source Version 1.8.16.0 Update rc1

Asterisk ≫ Open Source Version 1.8.16.0 Update rc2

Asterisk ≫ Open Source Version 1.8.17.0

Asterisk ≫ Open Source Version 1.8.17.0 Update rc1

Asterisk ≫ Open Source Version 1.8.17.0 Update rc2

Asterisk ≫ Open Source Version 1.8.17.0 Update rc3

Asterisk ≫ Open Source Version 1.8.18.0

Asterisk ≫ Open Source Version 1.8.18.0 Update rc1

Asterisk ≫ Open Source Version 1.8.18.1

Asterisk ≫ Open Source Version 1.8.19.0

Asterisk ≫ Open Source Version 1.8.19.0 Update rc1

Asterisk ≫ Open Source Version 1.8.19.0 Update rc3

Asterisk ≫ Open Source Version 1.8.19.1

Asterisk ≫ Open Source Version 1.8.20.0

Asterisk ≫ Open Source Version 1.8.20.0 Update rc1

Asterisk ≫ Open Source Version 1.8.20.0 Update rc2

Asterisk ≫ Open Source Version 1.8.20.1

Asterisk ≫ Open Source Version 10.0.0

Asterisk ≫ Open Source Version 10.0.0 Update beta1

Asterisk ≫ Open Source Version 10.0.0 Update beta2

Asterisk ≫ Open Source Version 10.0.0 Update rc1

Asterisk ≫ Open Source Version 10.0.0 Update rc2

Asterisk ≫ Open Source Version 10.0.0 Update rc3

Asterisk ≫ Open Source Version 10.0.1

Asterisk ≫ Open Source Version 10.1.0

Asterisk ≫ Open Source Version 10.1.0 Update rc1

Asterisk ≫ Open Source Version 10.1.0 Update rc2

Asterisk ≫ Open Source Version 10.1.1

Asterisk ≫ Open Source Version 10.1.2

Asterisk ≫ Open Source Version 10.1.3

Asterisk ≫ Open Source Version 10.2.0

Asterisk ≫ Open Source Version 10.2.0 Update rc1

Asterisk ≫ Open Source Version 10.2.0 Update rc2

Asterisk ≫ Open Source Version 10.2.0 Update rc3

Asterisk ≫ Open Source Version 10.2.0 Update rc4

Asterisk ≫ Open Source Version 10.2.1

Asterisk ≫ Open Source Version 10.3.0

Asterisk ≫ Open Source Version 10.3.0 Update rc2

Asterisk ≫ Open Source Version 10.3.0 Update rc3

Asterisk ≫ Open Source Version 10.3.1

Asterisk ≫ Open Source Version 10.4.0

Asterisk ≫ Open Source Version 10.4.0 Update rc1

Asterisk ≫ Open Source Version 10.4.0 Update rc2

Asterisk ≫ Open Source Version 10.4.0 Update rc3

Asterisk ≫ Open Source Version 10.4.1

Asterisk ≫ Open Source Version 10.4.2

Asterisk ≫ Open Source Version 10.5.0

Asterisk ≫ Open Source Version 10.5.0 Update rc1

Asterisk ≫ Open Source Version 10.5.0 Update rc2

Asterisk ≫ Open Source Version 10.5.1

Asterisk ≫ Open Source Version 10.5.2

Asterisk ≫ Open Source Version 10.6.0

Asterisk ≫ Open Source Version 10.6.0 Update rc1

Asterisk ≫ Open Source Version 10.6.0 Update rc2

Asterisk ≫ Open Source Version 10.6.1

Asterisk ≫ Open Source Version 10.7.0

Asterisk ≫ Open Source Version 10.7.0 Update rc1

Asterisk ≫ Open Source Version 10.7.1

Asterisk ≫ Open Source Version 10.8.0

Asterisk ≫ Open Source Version 10.8.0 Update rc1

Asterisk ≫ Open Source Version 10.8.0 Update rc2

Asterisk ≫ Open Source Version 10.9.0

Asterisk ≫ Open Source Version 10.9.0 Update rc1

Asterisk ≫ Open Source Version 10.9.0 Update rc2

Asterisk ≫ Open Source Version 10.9.0 Update rc3

Asterisk ≫ Open Source Version 10.10.0

Asterisk ≫ Open Source Version 10.10.0 Update rc1

Asterisk ≫ Open Source Version 10.10.0 Update rc2

Asterisk ≫ Open Source Version 10.10.1

Asterisk ≫ Open Source Version 10.11.0

Asterisk ≫ Open Source Version 10.11.0 Update rc1

Asterisk ≫ Open Source Version 10.11.0 Update rc3

Asterisk ≫ Open Source Version 10.11.1

Asterisk ≫ Open Source Version 10.12.0

Asterisk ≫ Open Source Version 10.12.0 Update rc1

Asterisk ≫ Open Source Version 10.12.0 Update rc2

Asterisk ≫ Open Source Version 10.12.1

Asterisk ≫ Open Source Version 11.0.0

Asterisk ≫ Open Source Version 11.0.0 Update beta1

Asterisk ≫ Open Source Version 11.0.0 Update beta2

Asterisk ≫ Open Source Version 11.0.0 Update rc1

Asterisk ≫ Open Source Version 11.0.0 Update rc2

Asterisk ≫ Open Source Version 11.0.1

Asterisk ≫ Open Source Version 11.0.2

Asterisk ≫ Open Source Version 11.1.0

Asterisk ≫ Open Source Version 11.1.0 Update rc1

Asterisk ≫ Open Source Version 11.1.0 Update rc3

Asterisk ≫ Open Source Version 11.1.1

Asterisk ≫ Open Source Version 11.1.2

Asterisk ≫ Open Source Version 11.2.0

Asterisk ≫ Open Source Version 11.2.0 Update rc1

Asterisk ≫ Open Source Version 11.2.0 Update rc2

Asterisk ≫ Open Source Version 11.2.1

Asterisk ≫ Certified Asterisk Version 1.8.15 Update cert1

Asterisk ≫ Certified Asterisk Version 1.8.15 Update cert1 Edition rc1

Asterisk ≫ Certified Asterisk Version 1.8.15 Update cert1 Edition rc2

Asterisk ≫ Certified Asterisk Version 1.8.15 Update cert1 Edition rc3

Asterisk ≫ Certified Asterisk Version 1.8.15.0

Asterisk ≫ Certified Asterisk Version 1.8.15.0 Update rc1

Asterisk ≫ Business Edition Version c.3.2.2

Asterisk ≫ Business Edition Version c.3.3

Asterisk ≫ Business Edition Version c.3.3.2

Asterisk ≫ Digiumphones Version 10.0.0

Asterisk ≫ Digiumphones Version 10.0.0 Update beta1

Asterisk ≫ Digiumphones Version 10.0.0 Update beta2

Asterisk ≫ Digiumphones Version 10.0.0 Update rc1

Asterisk ≫ Digiumphones Version 10.0.0 Update rc2

Asterisk ≫ Digiumphones Version 10.0.0 Update rc3

Asterisk ≫ Digiumphones Version 10.1.0

Asterisk ≫ Digiumphones Version 10.1.0 Update rc1

Asterisk ≫ Digiumphones Version 10.1.0 Update rc2

Asterisk ≫ Digiumphones Version 10.2.0

Asterisk ≫ Digiumphones Version 10.2.0 Update rc1

Asterisk ≫ Digiumphones Version 10.2.0 Update rc2

Asterisk ≫ Digiumphones Version 10.2.0 Update rc3

Asterisk ≫ Digiumphones Version 10.2.0 Update rc4

Asterisk ≫ Digiumphones Version 10.3.0

Asterisk ≫ Digiumphones Version 10.3.0 Update rc2

Asterisk ≫ Digiumphones Version 10.3.0 Update rc3

Asterisk ≫ Digiumphones Version 10.4.0

Asterisk ≫ Digiumphones Version 10.4.0 Update rc1

Asterisk ≫ Digiumphones Version 10.4.0 Update rc2

Asterisk ≫ Digiumphones Version 10.4.0 Update rc3

Asterisk ≫ Digiumphones Version 10.5.0

Asterisk ≫ Digiumphones Version 10.5.0 Update rc1

Asterisk ≫ Digiumphones Version 10.5.0 Update rc2

Asterisk ≫ Digiumphones Version 10.6.0

Asterisk ≫ Digiumphones Version 10.6.0 Update rc1

Asterisk ≫ Digiumphones Version 10.6.0 Update rc2

Asterisk ≫ Digiumphones Version 10.7.0

Asterisk ≫ Digiumphones Version 10.7.0 Update rc1

Asterisk ≫ Digiumphones Version 10.8.0

Asterisk ≫ Digiumphones Version 10.8.0 Update rc1

Asterisk ≫ Digiumphones Version 10.8.0 Update rc2

Asterisk ≫ Digiumphones Version 10.9.0 Update rc1

Asterisk ≫ Digiumphones Version 10.10.0

Asterisk ≫ Digiumphones Version 10.10.0 Update rc1

Asterisk ≫ Digiumphones Version 10.10.0 Update rc2

Asterisk ≫ Digiumphones Version 10.11.0

Asterisk ≫ Digiumphones Version 10.11.0 Update rc1

Asterisk ≫ Digiumphones Version 10.11.0 Update rc2

Asterisk ≫ Digiumphones Version 10.11.0 Update rc3

Asterisk ≫ Digiumphones Version 10.12.0

Asterisk ≫ Digiumphones Version 10.12.0 Update rc1

Asterisk ≫ Digiumphones Version 10.12.0 Update rc2

Asterisk ≫ Digiumphones Version 10.12.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.25%	0.655

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://downloads.asterisk.org/pub/security/AST-2013-003.html

Vendor Advisory

https://issues.asterisk.org/jira/browse/ASTERISK-21013

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-2264

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-2264

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-2264

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-2264