CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0041

IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 70.5%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2009-0041

Asterisk » Asterisk Business Edition » Version: Any

cpe:2.3:a:asterisk:asterisk_business_edition:*
Asterisk » Asterisk Business Edition » Version: a

cpe:2.3:a:asterisk:asterisk_business_edition:a
Asterisk » Asterisk Business Edition » Version: b.1.3.2

cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2
Asterisk » Asterisk Business Edition » Version: b.1.3.3

cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3
Asterisk » Asterisk Business Edition » Version: b.2.2.0

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0
Asterisk » Asterisk Business Edition » Version: b.2.2.1

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1
Asterisk » Asterisk Business Edition » Version: b.2.3.1

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1
Asterisk » Asterisk Business Edition » Version: b.2.3.2

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2
Asterisk » Asterisk Business Edition » Version: b.2.3.3

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3
Asterisk » Asterisk Business Edition » Version: b.2.3.4

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4
Asterisk » Asterisk Business Edition » Version: b.2.3.5

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.5
Asterisk » Asterisk Business Edition » Version: b.2.3.6

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.6
Asterisk » Asterisk Business Edition » Version: b.2.5.0

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0
Asterisk » Asterisk Business Edition » Version: b.2.5.1

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.1
Asterisk » Asterisk Business Edition » Version: b.2.5.3

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.3
Asterisk » Asterisk Business Edition » Version: c.1.0

cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0
Asterisk » Open Source » Version: Any

cpe:2.3:a:asterisk:open_source:*
Asterisk » Open Source » Version: 1.2.0

cpe:2.3:a:asterisk:open_source:1.2.0
Asterisk » Open Source » Version: 1.2.0beta1

cpe:2.3:a:asterisk:open_source:1.2.0beta1
Asterisk » Open Source » Version: 1.2.0beta2

cpe:2.3:a:asterisk:open_source:1.2.0beta2
Asterisk » Open Source » Version: 1.2.1

cpe:2.3:a:asterisk:open_source:1.2.1
Asterisk » Open Source » Version: 1.2.10

cpe:2.3:a:asterisk:open_source:1.2.10
Asterisk » Open Source » Version: 1.2.11

cpe:2.3:a:asterisk:open_source:1.2.11
Asterisk » Open Source » Version: 1.2.12

cpe:2.3:a:asterisk:open_source:1.2.12
Asterisk » Open Source » Version: 1.2.12.1

cpe:2.3:a:asterisk:open_source:1.2.12.1
Asterisk » Open Source » Version: 1.2.13

cpe:2.3:a:asterisk:open_source:1.2.13
Asterisk » Open Source » Version: 1.2.14

cpe:2.3:a:asterisk:open_source:1.2.14
Asterisk » Open Source » Version: 1.2.15

cpe:2.3:a:asterisk:open_source:1.2.15
Asterisk » Open Source » Version: 1.2.16

cpe:2.3:a:asterisk:open_source:1.2.16
Asterisk » Open Source » Version: 1.2.17

cpe:2.3:a:asterisk:open_source:1.2.17
Asterisk » Open Source » Version: 1.2.18

cpe:2.3:a:asterisk:open_source:1.2.18
Asterisk » Open Source » Version: 1.2.19

cpe:2.3:a:asterisk:open_source:1.2.19
Asterisk » Open Source » Version: 1.2.2

cpe:2.3:a:asterisk:open_source:1.2.2
Asterisk » Open Source » Version: 1.2.20

cpe:2.3:a:asterisk:open_source:1.2.20
Asterisk » Open Source » Version: 1.2.21

cpe:2.3:a:asterisk:open_source:1.2.21
Asterisk » Open Source » Version: 1.2.21.1

cpe:2.3:a:asterisk:open_source:1.2.21.1
Asterisk » Open Source » Version: 1.2.22

cpe:2.3:a:asterisk:open_source:1.2.22
Asterisk » Open Source » Version: 1.2.23

cpe:2.3:a:asterisk:open_source:1.2.23
Asterisk » Open Source » Version: 1.2.24

cpe:2.3:a:asterisk:open_source:1.2.24
Asterisk » Open Source » Version: 1.2.25

cpe:2.3:a:asterisk:open_source:1.2.25
Asterisk » Open Source » Version: 1.2.26

cpe:2.3:a:asterisk:open_source:1.2.26
Asterisk » Open Source » Version: 1.2.26.1

cpe:2.3:a:asterisk:open_source:1.2.26.1
Asterisk » Open Source » Version: 1.2.26.2

cpe:2.3:a:asterisk:open_source:1.2.26.2
Asterisk » Open Source » Version: 1.2.27

cpe:2.3:a:asterisk:open_source:1.2.27
Asterisk » Open Source » Version: 1.2.28

cpe:2.3:a:asterisk:open_source:1.2.28
Asterisk » Open Source » Version: 1.2.29

cpe:2.3:a:asterisk:open_source:1.2.29
Asterisk » Open Source » Version: 1.2.3

cpe:2.3:a:asterisk:open_source:1.2.3
Asterisk » Open Source » Version: 1.2.30

cpe:2.3:a:asterisk:open_source:1.2.30
Asterisk » Open Source » Version: 1.2.30.2

cpe:2.3:a:asterisk:open_source:1.2.30.2
Asterisk » Open Source » Version: 1.2.30.3

cpe:2.3:a:asterisk:open_source:1.2.30.3
Asterisk » Open Source » Version: 1.4.0

cpe:2.3:a:asterisk:open_source:1.4.0
Asterisk » Open Source » Version: 1.4.1

cpe:2.3:a:asterisk:open_source:1.4.1
Asterisk » Open Source » Version: 1.4.10

cpe:2.3:a:asterisk:open_source:1.4.10
Asterisk » Open Source » Version: 1.4.10.1

cpe:2.3:a:asterisk:open_source:1.4.10.1
Asterisk » Open Source » Version: 1.4.11

cpe:2.3:a:asterisk:open_source:1.4.11
Asterisk » Open Source » Version: 1.4.12

cpe:2.3:a:asterisk:open_source:1.4.12
Asterisk » Open Source » Version: 1.4.12.1

cpe:2.3:a:asterisk:open_source:1.4.12.1
Asterisk » Open Source » Version: 1.4.13

cpe:2.3:a:asterisk:open_source:1.4.13
Asterisk » Open Source » Version: 1.4.14

cpe:2.3:a:asterisk:open_source:1.4.14
Asterisk » Open Source » Version: 1.4.15

cpe:2.3:a:asterisk:open_source:1.4.15
Asterisk » Open Source » Version: 1.4.16

cpe:2.3:a:asterisk:open_source:1.4.16
Asterisk » Open Source » Version: 1.4.16.1

cpe:2.3:a:asterisk:open_source:1.4.16.1
Asterisk » Open Source » Version: 1.4.16.2

cpe:2.3:a:asterisk:open_source:1.4.16.2
Asterisk » Open Source » Version: 1.4.17

cpe:2.3:a:asterisk:open_source:1.4.17
Asterisk » Open Source » Version: 1.4.18

cpe:2.3:a:asterisk:open_source:1.4.18
Asterisk » Open Source » Version: 1.4.18.1

cpe:2.3:a:asterisk:open_source:1.4.18.1
Asterisk » Open Source » Version: 1.4.19

cpe:2.3:a:asterisk:open_source:1.4.19
Asterisk » Open Source » Version: 1.4.19.1

cpe:2.3:a:asterisk:open_source:1.4.19.1
Asterisk » Open Source » Version: 1.4.19.2

cpe:2.3:a:asterisk:open_source:1.4.19.2
Asterisk » Open Source » Version: 1.4.2

cpe:2.3:a:asterisk:open_source:1.4.2
Asterisk » Open Source » Version: 1.4.20

cpe:2.3:a:asterisk:open_source:1.4.20
Asterisk » Open Source » Version: 1.4.21

cpe:2.3:a:asterisk:open_source:1.4.21
Asterisk » Open Source » Version: 1.4.21.1

cpe:2.3:a:asterisk:open_source:1.4.21.1
Asterisk » Open Source » Version: 1.4.21.2

cpe:2.3:a:asterisk:open_source:1.4.21.2
Asterisk » Open Source » Version: 1.4.22

cpe:2.3:a:asterisk:open_source:1.4.22
Asterisk » Open Source » Version: 1.4.22.1

cpe:2.3:a:asterisk:open_source:1.4.22.1
Asterisk » Open Source » Version: 1.4.22.2

cpe:2.3:a:asterisk:open_source:1.4.22.2
Asterisk » Open Source » Version: 1.4.23

cpe:2.3:a:asterisk:open_source:1.4.23
Asterisk » Open Source » Version: 1.4.3

cpe:2.3:a:asterisk:open_source:1.4.3
Asterisk » Open Source » Version: 1.4.4

cpe:2.3:a:asterisk:open_source:1.4.4
Asterisk » Open Source » Version: 1.4.5

cpe:2.3:a:asterisk:open_source:1.4.5
Asterisk » Open Source » Version: 1.4.6

cpe:2.3:a:asterisk:open_source:1.4.6
Asterisk » Open Source » Version: 1.4.7

cpe:2.3:a:asterisk:open_source:1.4.7
Asterisk » Open Source » Version: 1.4.7.1

cpe:2.3:a:asterisk:open_source:1.4.7.1
Asterisk » Open Source » Version: 1.4.8

cpe:2.3:a:asterisk:open_source:1.4.8
Asterisk » Open Source » Version: 1.4.9

cpe:2.3:a:asterisk:open_source:1.4.9
Asterisk » Open Source » Version: 1.4_revision_95946

cpe:2.3:a:asterisk:open_source:1.4_revision_95946
Asterisk » Open Source » Version: 1.4beta

cpe:2.3:a:asterisk:open_source:1.4beta
Asterisk » Open Source » Version: 1.6.0

cpe:2.3:a:asterisk:open_source:1.6.0
Asterisk » Open Source » Version: 1.6.0.1

cpe:2.3:a:asterisk:open_source:1.6.0.1
Asterisk » Open Source » Version: 1.6.0.2

cpe:2.3:a:asterisk:open_source:1.6.0.2
Asterisk » Open Source » Version: 1.6.0.3

cpe:2.3:a:asterisk:open_source:1.6.0.3
Asterisk » S800i Appliance » Version: 1.2

cpe:2.3:h:asterisk:s800i_appliance:1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0041

Products

Pricing

Contact Us