5

CVE-2013-2264

The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits different behavior for invalid INVITE, SUBSCRIBE, and REGISTER transactions depending on whether the user account exists, which allows remote attackers to enumerate account names by (1) reading HTTP status codes, (2) reading additional text in a 403 (aka Forbidden) response, or (3) observing whether certain retransmissions occur.

Data is provided by the National Vulnerability Database (NVD)
Asterisk ≫ Open Source Version1.8.0
Asterisk ≫ Open Source Version1.8.0 Updatebeta1
Asterisk ≫ Open Source Version1.8.0 Updatebeta2
Asterisk ≫ Open Source Version1.8.0 Updatebeta3
Asterisk ≫ Open Source Version1.8.0 Updatebeta4
Asterisk ≫ Open Source Version1.8.0 Updatebeta5
Asterisk ≫ Open Source Version1.8.0 Updaterc2
Asterisk ≫ Open Source Version1.8.0 Updaterc3
Asterisk ≫ Open Source Version1.8.0 Updaterc4
Asterisk ≫ Open Source Version1.8.0 Updaterc5
Asterisk ≫ Open Source Version1.8.1
Asterisk ≫ Open Source Version1.8.1 Updaterc1
Asterisk ≫ Open Source Version1.8.1.1
Asterisk ≫ Open Source Version1.8.1.2
Asterisk ≫ Open Source Version1.8.2
Asterisk ≫ Open Source Version1.8.2 Updaterc1
Asterisk ≫ Open Source Version1.8.2.1
Asterisk ≫ Open Source Version1.8.2.2
Asterisk ≫ Open Source Version1.8.2.3
Asterisk ≫ Open Source Version1.8.2.4
Asterisk ≫ Open Source Version1.8.3
Asterisk ≫ Open Source Version1.8.3 Updaterc1
Asterisk ≫ Open Source Version1.8.3 Updaterc2
Asterisk ≫ Open Source Version1.8.3 Updaterc3
Asterisk ≫ Open Source Version1.8.3.1
Asterisk ≫ Open Source Version1.8.3.2
Asterisk ≫ Open Source Version1.8.3.3
Asterisk ≫ Open Source Version1.8.4
Asterisk ≫ Open Source Version1.8.4 Updaterc1
Asterisk ≫ Open Source Version1.8.4 Updaterc2
Asterisk ≫ Open Source Version1.8.4 Updaterc3
Asterisk ≫ Open Source Version1.8.4.1
Asterisk ≫ Open Source Version1.8.4.2
Asterisk ≫ Open Source Version1.8.4.3
Asterisk ≫ Open Source Version1.8.4.4
Asterisk ≫ Open Source Version1.8.5 Updaterc1
Asterisk ≫ Open Source Version1.8.5.0
Asterisk ≫ Open Source Version1.8.6.0
Asterisk ≫ Open Source Version1.8.6.0 Updaterc1
Asterisk ≫ Open Source Version1.8.6.0 Updaterc2
Asterisk ≫ Open Source Version1.8.6.0 Updaterc3
Asterisk ≫ Open Source Version1.8.7.0
Asterisk ≫ Open Source Version1.8.7.0 Updaterc1
Asterisk ≫ Open Source Version1.8.7.0 Updaterc2
Asterisk ≫ Open Source Version1.8.7.1
Asterisk ≫ Open Source Version1.8.7.2
Asterisk ≫ Open Source Version1.8.8.0
Asterisk ≫ Open Source Version1.8.8.0 Updaterc1
Asterisk ≫ Open Source Version1.8.8.0 Updaterc2
Asterisk ≫ Open Source Version1.8.8.0 Updaterc3
Asterisk ≫ Open Source Version1.8.8.0 Updaterc4
Asterisk ≫ Open Source Version1.8.8.0 Updaterc5
Asterisk ≫ Open Source Version1.8.8.1
Asterisk ≫ Open Source Version1.8.8.2
Asterisk ≫ Open Source Version1.8.9.0
Asterisk ≫ Open Source Version1.8.9.0 Updaterc1
Asterisk ≫ Open Source Version1.8.9.0 Updaterc2
Asterisk ≫ Open Source Version1.8.9.0 Updaterc3
Asterisk ≫ Open Source Version1.8.9.1
Asterisk ≫ Open Source Version1.8.9.2
Asterisk ≫ Open Source Version1.8.9.3
Asterisk ≫ Open Source Version1.8.10.0
Asterisk ≫ Open Source Version1.8.10.0 Updaterc1
Asterisk ≫ Open Source Version1.8.10.0 Updaterc2
Asterisk ≫ Open Source Version1.8.10.0 Updaterc3
Asterisk ≫ Open Source Version1.8.10.0 Updaterc4
Asterisk ≫ Open Source Version1.8.10.1
Asterisk ≫ Open Source Version1.8.11.0
Asterisk ≫ Open Source Version1.8.11.0 Updaterc2
Asterisk ≫ Open Source Version1.8.11.0 Updaterc3
Asterisk ≫ Open Source Version1.8.11.1
Asterisk ≫ Open Source Version1.8.12
Asterisk ≫ Open Source Version1.8.12.0 Updaterc1
Asterisk ≫ Open Source Version1.8.12.0 Updaterc2
Asterisk ≫ Open Source Version1.8.12.0 Updaterc3
Asterisk ≫ Open Source Version1.8.12.1
Asterisk ≫ Open Source Version1.8.12.2
Asterisk ≫ Open Source Version1.8.13.0
Asterisk ≫ Open Source Version1.8.13.0 Updaterc1
Asterisk ≫ Open Source Version1.8.13.0 Updaterc2
Asterisk ≫ Open Source Version1.8.13.1
Asterisk ≫ Open Source Version1.8.14.0
Asterisk ≫ Open Source Version1.8.14.0 Updaterc1
Asterisk ≫ Open Source Version1.8.14.0 Updaterc2
Asterisk ≫ Open Source Version1.8.14.1
Asterisk ≫ Open Source Version1.8.15.0
Asterisk ≫ Open Source Version1.8.15.0 Updaterc1
Asterisk ≫ Open Source Version1.8.15.1
Asterisk ≫ Open Source Version1.8.16.0
Asterisk ≫ Open Source Version1.8.16.0 Updaterc1
Asterisk ≫ Open Source Version1.8.16.0 Updaterc2
Asterisk ≫ Open Source Version1.8.17.0
Asterisk ≫ Open Source Version1.8.17.0 Updaterc1
Asterisk ≫ Open Source Version1.8.17.0 Updaterc2
Asterisk ≫ Open Source Version1.8.17.0 Updaterc3
Asterisk ≫ Open Source Version1.8.18.0
Asterisk ≫ Open Source Version1.8.18.0 Updaterc1
Asterisk ≫ Open Source Version1.8.18.1
Asterisk ≫ Open Source Version1.8.19.0
Asterisk ≫ Open Source Version1.8.19.0 Updaterc1
Asterisk ≫ Open Source Version1.8.19.0 Updaterc3
Asterisk ≫ Open Source Version1.8.19.1
Asterisk ≫ Open Source Version1.8.20.0
Asterisk ≫ Open Source Version1.8.20.0 Updaterc1
Asterisk ≫ Open Source Version1.8.20.0 Updaterc2
Asterisk ≫ Open Source Version1.8.20.1
Asterisk ≫ Open Source Version10.0.0
Asterisk ≫ Open Source Version10.0.0 Updatebeta1
Asterisk ≫ Open Source Version10.0.0 Updatebeta2
Asterisk ≫ Open Source Version10.0.0 Updaterc1
Asterisk ≫ Open Source Version10.0.0 Updaterc2
Asterisk ≫ Open Source Version10.0.0 Updaterc3
Asterisk ≫ Open Source Version10.0.1
Asterisk ≫ Open Source Version10.1.0
Asterisk ≫ Open Source Version10.1.0 Updaterc1
Asterisk ≫ Open Source Version10.1.0 Updaterc2
Asterisk ≫ Open Source Version10.1.1
Asterisk ≫ Open Source Version10.1.2
Asterisk ≫ Open Source Version10.1.3
Asterisk ≫ Open Source Version10.2.0
Asterisk ≫ Open Source Version10.2.0 Updaterc1
Asterisk ≫ Open Source Version10.2.0 Updaterc2
Asterisk ≫ Open Source Version10.2.0 Updaterc3
Asterisk ≫ Open Source Version10.2.0 Updaterc4
Asterisk ≫ Open Source Version10.2.1
Asterisk ≫ Open Source Version10.3.0
Asterisk ≫ Open Source Version10.3.0 Updaterc2
Asterisk ≫ Open Source Version10.3.0 Updaterc3
Asterisk ≫ Open Source Version10.3.1
Asterisk ≫ Open Source Version10.4.0
Asterisk ≫ Open Source Version10.4.0 Updaterc1
Asterisk ≫ Open Source Version10.4.0 Updaterc2
Asterisk ≫ Open Source Version10.4.0 Updaterc3
Asterisk ≫ Open Source Version10.4.1
Asterisk ≫ Open Source Version10.4.2
Asterisk ≫ Open Source Version10.5.0
Asterisk ≫ Open Source Version10.5.0 Updaterc1
Asterisk ≫ Open Source Version10.5.0 Updaterc2
Asterisk ≫ Open Source Version10.5.1
Asterisk ≫ Open Source Version10.5.2
Asterisk ≫ Open Source Version10.6.0
Asterisk ≫ Open Source Version10.6.0 Updaterc1
Asterisk ≫ Open Source Version10.6.0 Updaterc2
Asterisk ≫ Open Source Version10.6.1
Asterisk ≫ Open Source Version10.7.0
Asterisk ≫ Open Source Version10.7.0 Updaterc1
Asterisk ≫ Open Source Version10.7.1
Asterisk ≫ Open Source Version10.8.0
Asterisk ≫ Open Source Version10.8.0 Updaterc1
Asterisk ≫ Open Source Version10.8.0 Updaterc2
Asterisk ≫ Open Source Version10.9.0
Asterisk ≫ Open Source Version10.9.0 Updaterc1
Asterisk ≫ Open Source Version10.9.0 Updaterc2
Asterisk ≫ Open Source Version10.9.0 Updaterc3
Asterisk ≫ Open Source Version10.10.0
Asterisk ≫ Open Source Version10.10.0 Updaterc1
Asterisk ≫ Open Source Version10.10.0 Updaterc2
Asterisk ≫ Open Source Version10.10.1
Asterisk ≫ Open Source Version10.11.0
Asterisk ≫ Open Source Version10.11.0 Updaterc1
Asterisk ≫ Open Source Version10.11.0 Updaterc3
Asterisk ≫ Open Source Version10.11.1
Asterisk ≫ Open Source Version10.12.0
Asterisk ≫ Open Source Version10.12.0 Updaterc1
Asterisk ≫ Open Source Version10.12.0 Updaterc2
Asterisk ≫ Open Source Version10.12.1
Asterisk ≫ Open Source Version11.0.0
Asterisk ≫ Open Source Version11.0.0 Updatebeta1
Asterisk ≫ Open Source Version11.0.0 Updatebeta2
Asterisk ≫ Open Source Version11.0.0 Updaterc1
Asterisk ≫ Open Source Version11.0.0 Updaterc2
Asterisk ≫ Open Source Version11.0.1
Asterisk ≫ Open Source Version11.0.2
Asterisk ≫ Open Source Version11.1.0
Asterisk ≫ Open Source Version11.1.0 Updaterc1
Asterisk ≫ Open Source Version11.1.0 Updaterc3
Asterisk ≫ Open Source Version11.1.1
Asterisk ≫ Open Source Version11.1.2
Asterisk ≫ Open Source Version11.2.0
Asterisk ≫ Open Source Version11.2.0 Updaterc1
Asterisk ≫ Open Source Version11.2.0 Updaterc2
Asterisk ≫ Open Source Version11.2.1
Asterisk ≫ Certified Asterisk Version1.8.15 Updatecert1
Asterisk ≫ Certified Asterisk Version1.8.15 Updatecert1 Editionrc1
Asterisk ≫ Certified Asterisk Version1.8.15 Updatecert1 Editionrc2
Asterisk ≫ Certified Asterisk Version1.8.15 Updatecert1 Editionrc3
Asterisk ≫ Certified Asterisk Version1.8.15.0
Asterisk ≫ Certified Asterisk Version1.8.15.0 Updaterc1
Asterisk ≫ Business Edition Versionc.3.2.2
Asterisk ≫ Business Edition Versionc.3.3
Asterisk ≫ Business Edition Versionc.3.3.2
Asterisk ≫ Digiumphones Version10.0.0
Asterisk ≫ Digiumphones Version10.0.0 Updatebeta1
Asterisk ≫ Digiumphones Version10.0.0 Updatebeta2
Asterisk ≫ Digiumphones Version10.0.0 Updaterc1
Asterisk ≫ Digiumphones Version10.0.0 Updaterc2
Asterisk ≫ Digiumphones Version10.0.0 Updaterc3
Asterisk ≫ Digiumphones Version10.1.0
Asterisk ≫ Digiumphones Version10.1.0 Updaterc1
Asterisk ≫ Digiumphones Version10.1.0 Updaterc2
Asterisk ≫ Digiumphones Version10.2.0
Asterisk ≫ Digiumphones Version10.2.0 Updaterc1
Asterisk ≫ Digiumphones Version10.2.0 Updaterc2
Asterisk ≫ Digiumphones Version10.2.0 Updaterc3
Asterisk ≫ Digiumphones Version10.2.0 Updaterc4
Asterisk ≫ Digiumphones Version10.3.0
Asterisk ≫ Digiumphones Version10.3.0 Updaterc2
Asterisk ≫ Digiumphones Version10.3.0 Updaterc3
Asterisk ≫ Digiumphones Version10.4.0
Asterisk ≫ Digiumphones Version10.4.0 Updaterc1
Asterisk ≫ Digiumphones Version10.4.0 Updaterc2
Asterisk ≫ Digiumphones Version10.4.0 Updaterc3
Asterisk ≫ Digiumphones Version10.5.0
Asterisk ≫ Digiumphones Version10.5.0 Updaterc1
Asterisk ≫ Digiumphones Version10.5.0 Updaterc2
Asterisk ≫ Digiumphones Version10.6.0
Asterisk ≫ Digiumphones Version10.6.0 Updaterc1
Asterisk ≫ Digiumphones Version10.6.0 Updaterc2
Asterisk ≫ Digiumphones Version10.7.0
Asterisk ≫ Digiumphones Version10.7.0 Updaterc1
Asterisk ≫ Digiumphones Version10.8.0
Asterisk ≫ Digiumphones Version10.8.0 Updaterc1
Asterisk ≫ Digiumphones Version10.8.0 Updaterc2
Asterisk ≫ Digiumphones Version10.9.0 Updaterc1
Asterisk ≫ Digiumphones Version10.10.0
Asterisk ≫ Digiumphones Version10.10.0 Updaterc1
Asterisk ≫ Digiumphones Version10.10.0 Updaterc2
Asterisk ≫ Digiumphones Version10.11.0
Asterisk ≫ Digiumphones Version10.11.0 Updaterc1
Asterisk ≫ Digiumphones Version10.11.0 Updaterc2
Asterisk ≫ Digiumphones Version10.11.0 Updaterc3
Asterisk ≫ Digiumphones Version10.12.0
Asterisk ≫ Digiumphones Version10.12.0 Updaterc1
Asterisk ≫ Digiumphones Version10.12.0 Updaterc2
Asterisk ≫ Digiumphones Version10.12.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.17% 0.351
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.