Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2009-3727

Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error messages depending on whether a SIP username is valid, which allows remote attackers to enumerate valid usernames via multiple crafted REGISTER messages with inconsistent usernames in the URI in the To header and the Digest in the Authorization header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.2%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2009-3727
  • Digium » Asterisk » Version: 1.2.0
    cpe:2.3:a:digium:asterisk:1.2.0
  • Digium » Asterisk » Version: 1.2.1
    cpe:2.3:a:digium:asterisk:1.2.1
  • Digium » Asterisk » Version: 1.2.10
    cpe:2.3:a:digium:asterisk:1.2.10
  • Digium » Asterisk » Version: 1.2.11
    cpe:2.3:a:digium:asterisk:1.2.11
  • Digium » Asterisk » Version: 1.2.12
    cpe:2.3:a:digium:asterisk:1.2.12
  • Digium » Asterisk » Version: 1.2.12.1
    cpe:2.3:a:digium:asterisk:1.2.12.1
  • Digium » Asterisk » Version: 1.2.13
    cpe:2.3:a:digium:asterisk:1.2.13
  • Digium » Asterisk » Version: 1.2.14
    cpe:2.3:a:digium:asterisk:1.2.14
  • Digium » Asterisk » Version: 1.2.15
    cpe:2.3:a:digium:asterisk:1.2.15
  • Digium » Asterisk » Version: 1.2.16
    cpe:2.3:a:digium:asterisk:1.2.16
  • Digium » Asterisk » Version: 1.2.17
    cpe:2.3:a:digium:asterisk:1.2.17
  • Digium » Asterisk » Version: 1.2.18
    cpe:2.3:a:digium:asterisk:1.2.18
  • Digium » Asterisk » Version: 1.2.19
    cpe:2.3:a:digium:asterisk:1.2.19
  • Digium » Asterisk » Version: 1.2.2
    cpe:2.3:a:digium:asterisk:1.2.2
  • Digium » Asterisk » Version: 1.2.20
    cpe:2.3:a:digium:asterisk:1.2.20
  • Digium » Asterisk » Version: 1.2.21
    cpe:2.3:a:digium:asterisk:1.2.21
  • Digium » Asterisk » Version: 1.2.21.1
    cpe:2.3:a:digium:asterisk:1.2.21.1
  • Digium » Asterisk » Version: 1.2.22
    cpe:2.3:a:digium:asterisk:1.2.22
  • Digium » Asterisk » Version: 1.2.23
    cpe:2.3:a:digium:asterisk:1.2.23
  • Digium » Asterisk » Version: 1.2.24
    cpe:2.3:a:digium:asterisk:1.2.24
  • Digium » Asterisk » Version: 1.2.25
    cpe:2.3:a:digium:asterisk:1.2.25
  • Digium » Asterisk » Version: 1.2.26
    cpe:2.3:a:digium:asterisk:1.2.26
  • Digium » Asterisk » Version: 1.2.26.1
    cpe:2.3:a:digium:asterisk:1.2.26.1
  • Digium » Asterisk » Version: 1.2.26.2
    cpe:2.3:a:digium:asterisk:1.2.26.2
  • Digium » Asterisk » Version: 1.2.27
    cpe:2.3:a:digium:asterisk:1.2.27
  • Digium » Asterisk » Version: 1.2.28
    cpe:2.3:a:digium:asterisk:1.2.28
  • Digium » Asterisk » Version: 1.2.28.1
    cpe:2.3:a:digium:asterisk:1.2.28.1
  • Digium » Asterisk » Version: 1.2.29
    cpe:2.3:a:digium:asterisk:1.2.29
  • Digium » Asterisk » Version: 1.2.3
    cpe:2.3:a:digium:asterisk:1.2.3
  • Digium » Asterisk » Version: 1.2.30
    cpe:2.3:a:digium:asterisk:1.2.30
  • Digium » Asterisk » Version: 1.2.30.1
    cpe:2.3:a:digium:asterisk:1.2.30.1
  • Digium » Asterisk » Version: 1.2.30.2
    cpe:2.3:a:digium:asterisk:1.2.30.2
  • Digium » Asterisk » Version: 1.2.30.3
    cpe:2.3:a:digium:asterisk:1.2.30.3
  • Digium » Asterisk » Version: 1.2.30.4
    cpe:2.3:a:digium:asterisk:1.2.30.4
  • Digium » Asterisk » Version: 1.2.31
    cpe:2.3:a:digium:asterisk:1.2.31
  • Digium » Asterisk » Version: 1.2.31.1
    cpe:2.3:a:digium:asterisk:1.2.31.1
  • Digium » Asterisk » Version: 1.2.32
    cpe:2.3:a:digium:asterisk:1.2.32
  • Digium » Asterisk » Version: 1.2.33
    cpe:2.3:a:digium:asterisk:1.2.33
  • Digium » Asterisk » Version: 1.2.34
    cpe:2.3:a:digium:asterisk:1.2.34
  • Digium » Asterisk » Version: 1.4.0
    cpe:2.3:a:digium:asterisk:1.4.0
  • Digium » Asterisk » Version: 1.4.1
    cpe:2.3:a:digium:asterisk:1.4.1
  • Digium » Asterisk » Version: 1.4.10
    cpe:2.3:a:digium:asterisk:1.4.10
  • Digium » Asterisk » Version: 1.4.10.1
    cpe:2.3:a:digium:asterisk:1.4.10.1
  • Digium » Asterisk » Version: 1.4.11
    cpe:2.3:a:digium:asterisk:1.4.11
  • Digium » Asterisk » Version: 1.4.12
    cpe:2.3:a:digium:asterisk:1.4.12
  • Digium » Asterisk » Version: 1.4.12.1
    cpe:2.3:a:digium:asterisk:1.4.12.1
  • Digium » Asterisk » Version: 1.4.13
    cpe:2.3:a:digium:asterisk:1.4.13
  • Digium » Asterisk » Version: 1.4.14
    cpe:2.3:a:digium:asterisk:1.4.14
  • Digium » Asterisk » Version: 1.4.15
    cpe:2.3:a:digium:asterisk:1.4.15
  • Digium » Asterisk » Version: 1.4.16
    cpe:2.3:a:digium:asterisk:1.4.16
  • Digium » Asterisk » Version: 1.4.16.1
    cpe:2.3:a:digium:asterisk:1.4.16.1
  • Digium » Asterisk » Version: 1.4.16.2
    cpe:2.3:a:digium:asterisk:1.4.16.2
  • Digium » Asterisk » Version: 1.4.17
    cpe:2.3:a:digium:asterisk:1.4.17
  • Digium » Asterisk » Version: 1.4.18
    cpe:2.3:a:digium:asterisk:1.4.18
  • Digium » Asterisk » Version: 1.4.19
    cpe:2.3:a:digium:asterisk:1.4.19
  • Digium » Asterisk » Version: 1.4.19.1
    cpe:2.3:a:digium:asterisk:1.4.19.1
  • Digium » Asterisk » Version: 1.4.19.2
    cpe:2.3:a:digium:asterisk:1.4.19.2
  • Digium » Asterisk » Version: 1.4.2
    cpe:2.3:a:digium:asterisk:1.4.2
  • Digium » Asterisk » Version: 1.4.20
    cpe:2.3:a:digium:asterisk:1.4.20
  • Digium » Asterisk » Version: 1.4.20.1
    cpe:2.3:a:digium:asterisk:1.4.20.1
  • Digium » Asterisk » Version: 1.4.21
    cpe:2.3:a:digium:asterisk:1.4.21
  • Digium » Asterisk » Version: 1.4.21.1
    cpe:2.3:a:digium:asterisk:1.4.21.1
  • Digium » Asterisk » Version: 1.4.21.2
    cpe:2.3:a:digium:asterisk:1.4.21.2
  • Digium » Asterisk » Version: 1.4.22
    cpe:2.3:a:digium:asterisk:1.4.22
  • Digium » Asterisk » Version: 1.4.22.1
    cpe:2.3:a:digium:asterisk:1.4.22.1
  • Digium » Asterisk » Version: 1.4.22.2
    cpe:2.3:a:digium:asterisk:1.4.22.2
  • Digium » Asterisk » Version: 1.4.23
    cpe:2.3:a:digium:asterisk:1.4.23
  • Digium » Asterisk » Version: 1.4.23.1
    cpe:2.3:a:digium:asterisk:1.4.23.1
  • Digium » Asterisk » Version: 1.4.23.2
    cpe:2.3:a:digium:asterisk:1.4.23.2
  • Digium » Asterisk » Version: 1.4.24
    cpe:2.3:a:digium:asterisk:1.4.24
  • Digium » Asterisk » Version: 1.4.24.1
    cpe:2.3:a:digium:asterisk:1.4.24.1
  • Digium » Asterisk » Version: 1.4.25
    cpe:2.3:a:digium:asterisk:1.4.25
  • Digium » Asterisk » Version: 1.4.25.1
    cpe:2.3:a:digium:asterisk:1.4.25.1
  • Digium » Asterisk » Version: 1.4.26
    cpe:2.3:a:digium:asterisk:1.4.26
  • Digium » Asterisk » Version: 1.4.26.1
    cpe:2.3:a:digium:asterisk:1.4.26.1
  • Digium » Asterisk » Version: 1.4.26.2
    cpe:2.3:a:digium:asterisk:1.4.26.2
  • Digium » Asterisk » Version: 1.4.3
    cpe:2.3:a:digium:asterisk:1.4.3
  • Digium » Asterisk » Version: 1.4.4
    cpe:2.3:a:digium:asterisk:1.4.4
  • Digium » Asterisk » Version: 1.4.5
    cpe:2.3:a:digium:asterisk:1.4.5
  • Digium » Asterisk » Version: 1.4.6
    cpe:2.3:a:digium:asterisk:1.4.6
  • Digium » Asterisk » Version: 1.4.7
    cpe:2.3:a:digium:asterisk:1.4.7
  • Digium » Asterisk » Version: 1.4.7.1
    cpe:2.3:a:digium:asterisk:1.4.7.1
  • Digium » Asterisk » Version: 1.4.8
    cpe:2.3:a:digium:asterisk:1.4.8
  • Digium » Asterisk » Version: 1.4.9
    cpe:2.3:a:digium:asterisk:1.4.9
  • Digium » Asterisk » Version: 1.6.0
    cpe:2.3:a:digium:asterisk:1.6.0
  • Digium » Asterisk » Version: 1.6.0.1
    cpe:2.3:a:digium:asterisk:1.6.0.1
  • Digium » Asterisk » Version: 1.6.0.10
    cpe:2.3:a:digium:asterisk:1.6.0.10
  • Digium » Asterisk » Version: 1.6.0.11
    cpe:2.3:a:digium:asterisk:1.6.0.11
  • Digium » Asterisk » Version: 1.6.0.14
    cpe:2.3:a:digium:asterisk:1.6.0.14
  • Digium » Asterisk » Version: 1.6.0.15
    cpe:2.3:a:digium:asterisk:1.6.0.15
  • Digium » Asterisk » Version: 1.6.0.16
    cpe:2.3:a:digium:asterisk:1.6.0.16
  • Digium » Asterisk » Version: 1.6.0.2
    cpe:2.3:a:digium:asterisk:1.6.0.2
  • Digium » Asterisk » Version: 1.6.0.3
    cpe:2.3:a:digium:asterisk:1.6.0.3
  • Digium » Asterisk » Version: 1.6.0.4
    cpe:2.3:a:digium:asterisk:1.6.0.4
  • Digium » Asterisk » Version: 1.6.0.5
    cpe:2.3:a:digium:asterisk:1.6.0.5
  • Digium » Asterisk » Version: 1.6.0.6
    cpe:2.3:a:digium:asterisk:1.6.0.6
  • Digium » Asterisk » Version: 1.6.0.7
    cpe:2.3:a:digium:asterisk:1.6.0.7
  • Digium » Asterisk » Version: 1.6.0.8
    cpe:2.3:a:digium:asterisk:1.6.0.8
  • Digium » Asterisk » Version: 1.6.0.9
    cpe:2.3:a:digium:asterisk:1.6.0.9
  • Digium » Asterisk » Version: 1.6.1.0
    cpe:2.3:a:digium:asterisk:1.6.1.0
  • Digium » Asterisk » Version: 1.6.1.1
    cpe:2.3:a:digium:asterisk:1.6.1.1
  • Digium » Asterisk » Version: 1.6.1.10
    cpe:2.3:a:digium:asterisk:1.6.1.10
  • Digium » Asterisk » Version: 1.6.1.2
    cpe:2.3:a:digium:asterisk:1.6.1.2
  • Digium » Asterisk » Version: 1.6.1.3
    cpe:2.3:a:digium:asterisk:1.6.1.3
  • Digium » Asterisk » Version: 1.6.1.4
    cpe:2.3:a:digium:asterisk:1.6.1.4
  • Digium » Asterisk » Version: 1.6.1.5
    cpe:2.3:a:digium:asterisk:1.6.1.5
  • Digium » Asterisk » Version: 1.6.1.6
    cpe:2.3:a:digium:asterisk:1.6.1.6
  • Digium » Asterisk » Version: 1.6.1.7
    cpe:2.3:a:digium:asterisk:1.6.1.7
  • Digium » Asterisk » Version: 1.6.1.8
    cpe:2.3:a:digium:asterisk:1.6.1.8
  • Digium » Asterisk » Version: a
    cpe:2.3:a:digium:asterisk:a
  • Digium » Asterisk » Version: b
    cpe:2.3:a:digium:asterisk:b
  • Digium » Asterisk » Version: b.1.3.2
    cpe:2.3:a:digium:asterisk:b.1.3.2
  • Digium » Asterisk » Version: b.1.3.3
    cpe:2.3:a:digium:asterisk:b.1.3.3
  • Digium » Asterisk » Version: b.2.2.0
    cpe:2.3:a:digium:asterisk:b.2.2.0
  • Digium » Asterisk » Version: b.2.2.1
    cpe:2.3:a:digium:asterisk:b.2.2.1
  • Digium » Asterisk » Version: b.2.3.1
    cpe:2.3:a:digium:asterisk:b.2.3.1
  • Digium » Asterisk » Version: b.2.3.2
    cpe:2.3:a:digium:asterisk:b.2.3.2
  • Digium » Asterisk » Version: b.2.3.3
    cpe:2.3:a:digium:asterisk:b.2.3.3
  • Digium » Asterisk » Version: b.2.3.4
    cpe:2.3:a:digium:asterisk:b.2.3.4
  • Digium » Asterisk » Version: b.2.3.5
    cpe:2.3:a:digium:asterisk:b.2.3.5
  • Digium » Asterisk » Version: b.2.3.6
    cpe:2.3:a:digium:asterisk:b.2.3.6
  • Digium » Asterisk » Version: b.2.5.0
    cpe:2.3:a:digium:asterisk:b.2.5.0
  • Digium » Asterisk » Version: b.2.5.1
    cpe:2.3:a:digium:asterisk:b.2.5.1
  • Digium » Asterisk » Version: b.2.5.2
    cpe:2.3:a:digium:asterisk:b.2.5.2
  • Digium » Asterisk » Version: b.2.5.3
    cpe:2.3:a:digium:asterisk:b.2.5.3
  • Digium » Asterisk » Version: c
    cpe:2.3:a:digium:asterisk:c
  • Digium » Asterisk » Version: c.2.3
    cpe:2.3:a:digium:asterisk:c.2.3
  • Digium » Asterisk » Version: c.3.0
    cpe:2.3:a:digium:asterisk:c.3.0
  • Digium » Asterisknow » Version: 1.5
    cpe:2.3:a:digium:asterisknow:1.5
  • Digium » S800i » Version: 1.3.0
    cpe:2.3:h:digium:s800i:1.3.0
  • Digium » S800i » Version: 1.3.0.2
    cpe:2.3:h:digium:s800i:1.3.0.2
  • Digium » S800i » Version: 1.3.0.3
    cpe:2.3:h:digium:s800i:1.3.0.3
  • Digium » S800i » Version: 1.3.0.4
    cpe:2.3:h:digium:s800i:1.3.0.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved