Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2011-4597

The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series of requests.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.5%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2011-4597
  • Digium » Asterisk » Version: 1.4.0
    cpe:2.3:a:digium:asterisk:1.4.0
  • Digium » Asterisk » Version: 1.4.1
    cpe:2.3:a:digium:asterisk:1.4.1
  • Digium » Asterisk » Version: 1.4.10
    cpe:2.3:a:digium:asterisk:1.4.10
  • Digium » Asterisk » Version: 1.4.10.1
    cpe:2.3:a:digium:asterisk:1.4.10.1
  • Digium » Asterisk » Version: 1.4.11
    cpe:2.3:a:digium:asterisk:1.4.11
  • Digium » Asterisk » Version: 1.4.12
    cpe:2.3:a:digium:asterisk:1.4.12
  • Digium » Asterisk » Version: 1.4.12.1
    cpe:2.3:a:digium:asterisk:1.4.12.1
  • Digium » Asterisk » Version: 1.4.13
    cpe:2.3:a:digium:asterisk:1.4.13
  • Digium » Asterisk » Version: 1.4.14
    cpe:2.3:a:digium:asterisk:1.4.14
  • Digium » Asterisk » Version: 1.4.15
    cpe:2.3:a:digium:asterisk:1.4.15
  • Digium » Asterisk » Version: 1.4.16
    cpe:2.3:a:digium:asterisk:1.4.16
  • Digium » Asterisk » Version: 1.4.16.1
    cpe:2.3:a:digium:asterisk:1.4.16.1
  • Digium » Asterisk » Version: 1.4.16.2
    cpe:2.3:a:digium:asterisk:1.4.16.2
  • Digium » Asterisk » Version: 1.4.17
    cpe:2.3:a:digium:asterisk:1.4.17
  • Digium » Asterisk » Version: 1.4.18
    cpe:2.3:a:digium:asterisk:1.4.18
  • Digium » Asterisk » Version: 1.4.19
    cpe:2.3:a:digium:asterisk:1.4.19
  • Digium » Asterisk » Version: 1.4.19.1
    cpe:2.3:a:digium:asterisk:1.4.19.1
  • Digium » Asterisk » Version: 1.4.19.2
    cpe:2.3:a:digium:asterisk:1.4.19.2
  • Digium » Asterisk » Version: 1.4.2
    cpe:2.3:a:digium:asterisk:1.4.2
  • Digium » Asterisk » Version: 1.4.20
    cpe:2.3:a:digium:asterisk:1.4.20
  • Digium » Asterisk » Version: 1.4.20.1
    cpe:2.3:a:digium:asterisk:1.4.20.1
  • Digium » Asterisk » Version: 1.4.21
    cpe:2.3:a:digium:asterisk:1.4.21
  • Digium » Asterisk » Version: 1.4.21.1
    cpe:2.3:a:digium:asterisk:1.4.21.1
  • Digium » Asterisk » Version: 1.4.21.2
    cpe:2.3:a:digium:asterisk:1.4.21.2
  • Digium » Asterisk » Version: 1.4.22
    cpe:2.3:a:digium:asterisk:1.4.22
  • Digium » Asterisk » Version: 1.4.22.1
    cpe:2.3:a:digium:asterisk:1.4.22.1
  • Digium » Asterisk » Version: 1.4.22.2
    cpe:2.3:a:digium:asterisk:1.4.22.2
  • Digium » Asterisk » Version: 1.4.23
    cpe:2.3:a:digium:asterisk:1.4.23
  • Digium » Asterisk » Version: 1.4.23.1
    cpe:2.3:a:digium:asterisk:1.4.23.1
  • Digium » Asterisk » Version: 1.4.23.2
    cpe:2.3:a:digium:asterisk:1.4.23.2
  • Digium » Asterisk » Version: 1.4.24
    cpe:2.3:a:digium:asterisk:1.4.24
  • Digium » Asterisk » Version: 1.4.24.1
    cpe:2.3:a:digium:asterisk:1.4.24.1
  • Digium » Asterisk » Version: 1.4.25
    cpe:2.3:a:digium:asterisk:1.4.25
  • Digium » Asterisk » Version: 1.4.25.1
    cpe:2.3:a:digium:asterisk:1.4.25.1
  • Digium » Asterisk » Version: 1.4.26
    cpe:2.3:a:digium:asterisk:1.4.26
  • Digium » Asterisk » Version: 1.4.26.1
    cpe:2.3:a:digium:asterisk:1.4.26.1
  • Digium » Asterisk » Version: 1.4.26.2
    cpe:2.3:a:digium:asterisk:1.4.26.2
  • Digium » Asterisk » Version: 1.4.26.3
    cpe:2.3:a:digium:asterisk:1.4.26.3
  • Digium » Asterisk » Version: 1.4.27
    cpe:2.3:a:digium:asterisk:1.4.27
  • Digium » Asterisk » Version: 1.4.27.1
    cpe:2.3:a:digium:asterisk:1.4.27.1
  • Digium » Asterisk » Version: 1.4.28
    cpe:2.3:a:digium:asterisk:1.4.28
  • Digium » Asterisk » Version: 1.4.29
    cpe:2.3:a:digium:asterisk:1.4.29
  • Digium » Asterisk » Version: 1.4.29.1
    cpe:2.3:a:digium:asterisk:1.4.29.1
  • Digium » Asterisk » Version: 1.4.3
    cpe:2.3:a:digium:asterisk:1.4.3
  • Digium » Asterisk » Version: 1.4.30
    cpe:2.3:a:digium:asterisk:1.4.30
  • Digium » Asterisk » Version: 1.4.31
    cpe:2.3:a:digium:asterisk:1.4.31
  • Digium » Asterisk » Version: 1.4.32
    cpe:2.3:a:digium:asterisk:1.4.32
  • Digium » Asterisk » Version: 1.4.33
    cpe:2.3:a:digium:asterisk:1.4.33
  • Digium » Asterisk » Version: 1.4.33.1
    cpe:2.3:a:digium:asterisk:1.4.33.1
  • Digium » Asterisk » Version: 1.4.34
    cpe:2.3:a:digium:asterisk:1.4.34
  • Digium » Asterisk » Version: 1.4.35
    cpe:2.3:a:digium:asterisk:1.4.35
  • Digium » Asterisk » Version: 1.4.36
    cpe:2.3:a:digium:asterisk:1.4.36
  • Digium » Asterisk » Version: 1.4.37
    cpe:2.3:a:digium:asterisk:1.4.37
  • Digium » Asterisk » Version: 1.4.38
    cpe:2.3:a:digium:asterisk:1.4.38
  • Digium » Asterisk » Version: 1.4.39
    cpe:2.3:a:digium:asterisk:1.4.39
  • Digium » Asterisk » Version: 1.4.39.1
    cpe:2.3:a:digium:asterisk:1.4.39.1
  • Digium » Asterisk » Version: 1.4.39.2
    cpe:2.3:a:digium:asterisk:1.4.39.2
  • Digium » Asterisk » Version: 1.4.4
    cpe:2.3:a:digium:asterisk:1.4.4
  • Digium » Asterisk » Version: 1.4.40
    cpe:2.3:a:digium:asterisk:1.4.40
  • Digium » Asterisk » Version: 1.4.40.1
    cpe:2.3:a:digium:asterisk:1.4.40.1
  • Digium » Asterisk » Version: 1.4.40.2
    cpe:2.3:a:digium:asterisk:1.4.40.2
  • Digium » Asterisk » Version: 1.4.41
    cpe:2.3:a:digium:asterisk:1.4.41
  • Digium » Asterisk » Version: 1.4.41.1
    cpe:2.3:a:digium:asterisk:1.4.41.1
  • Digium » Asterisk » Version: 1.4.41.2
    cpe:2.3:a:digium:asterisk:1.4.41.2
  • Digium » Asterisk » Version: 1.4.42
    cpe:2.3:a:digium:asterisk:1.4.42
  • Digium » Asterisk » Version: 1.4.5
    cpe:2.3:a:digium:asterisk:1.4.5
  • Digium » Asterisk » Version: 1.4.6
    cpe:2.3:a:digium:asterisk:1.4.6
  • Digium » Asterisk » Version: 1.4.7
    cpe:2.3:a:digium:asterisk:1.4.7
  • Digium » Asterisk » Version: 1.4.7.1
    cpe:2.3:a:digium:asterisk:1.4.7.1
  • Digium » Asterisk » Version: 1.4.8
    cpe:2.3:a:digium:asterisk:1.4.8
  • Digium » Asterisk » Version: 1.4.9
    cpe:2.3:a:digium:asterisk:1.4.9
  • Digium » Asterisk » Version: 1.6.2.0
    cpe:2.3:a:digium:asterisk:1.6.2.0
  • Digium » Asterisk » Version: 1.6.2.1
    cpe:2.3:a:digium:asterisk:1.6.2.1
  • Digium » Asterisk » Version: 1.6.2.15
    cpe:2.3:a:digium:asterisk:1.6.2.15
  • Digium » Asterisk » Version: 1.6.2.16
    cpe:2.3:a:digium:asterisk:1.6.2.16
  • Digium » Asterisk » Version: 1.6.2.16.1
    cpe:2.3:a:digium:asterisk:1.6.2.16.1
  • Digium » Asterisk » Version: 1.6.2.16.2
    cpe:2.3:a:digium:asterisk:1.6.2.16.2
  • Digium » Asterisk » Version: 1.6.2.17
    cpe:2.3:a:digium:asterisk:1.6.2.17
  • Digium » Asterisk » Version: 1.6.2.17.1
    cpe:2.3:a:digium:asterisk:1.6.2.17.1
  • Digium » Asterisk » Version: 1.6.2.17.2
    cpe:2.3:a:digium:asterisk:1.6.2.17.2
  • Digium » Asterisk » Version: 1.6.2.17.3
    cpe:2.3:a:digium:asterisk:1.6.2.17.3
  • Digium » Asterisk » Version: 1.6.2.18
    cpe:2.3:a:digium:asterisk:1.6.2.18
  • Digium » Asterisk » Version: 1.6.2.19
    cpe:2.3:a:digium:asterisk:1.6.2.19
  • Digium » Asterisk » Version: 1.6.2.2
    cpe:2.3:a:digium:asterisk:1.6.2.2
  • Digium » Asterisk » Version: 1.6.2.20
    cpe:2.3:a:digium:asterisk:1.6.2.20
  • Digium » Asterisk » Version: 1.6.2.21
    cpe:2.3:a:digium:asterisk:1.6.2.21
  • Digium » Asterisk » Version: 1.6.2.3
    cpe:2.3:a:digium:asterisk:1.6.2.3
  • Digium » Asterisk » Version: 1.6.2.4
    cpe:2.3:a:digium:asterisk:1.6.2.4
  • Digium » Asterisk » Version: 1.6.2.5
    cpe:2.3:a:digium:asterisk:1.6.2.5
  • Digium » Asterisk » Version: 1.6.2.6
    cpe:2.3:a:digium:asterisk:1.6.2.6
  • Digium » Asterisk » Version: 1.8.0
    cpe:2.3:a:digium:asterisk:1.8.0
  • Digium » Asterisk » Version: 1.8.1
    cpe:2.3:a:digium:asterisk:1.8.1
  • Digium » Asterisk » Version: 1.8.1.1
    cpe:2.3:a:digium:asterisk:1.8.1.1
  • Digium » Asterisk » Version: 1.8.1.2
    cpe:2.3:a:digium:asterisk:1.8.1.2
  • Digium » Asterisk » Version: 1.8.2
    cpe:2.3:a:digium:asterisk:1.8.2
  • Digium » Asterisk » Version: 1.8.2.1
    cpe:2.3:a:digium:asterisk:1.8.2.1
  • Digium » Asterisk » Version: 1.8.2.2
    cpe:2.3:a:digium:asterisk:1.8.2.2
  • Digium » Asterisk » Version: 1.8.2.3
    cpe:2.3:a:digium:asterisk:1.8.2.3
  • Digium » Asterisk » Version: 1.8.2.4
    cpe:2.3:a:digium:asterisk:1.8.2.4
  • Digium » Asterisk » Version: 1.8.3
    cpe:2.3:a:digium:asterisk:1.8.3
  • Digium » Asterisk » Version: 1.8.3.1
    cpe:2.3:a:digium:asterisk:1.8.3.1
  • Digium » Asterisk » Version: 1.8.3.2
    cpe:2.3:a:digium:asterisk:1.8.3.2
  • Digium » Asterisk » Version: 1.8.3.3
    cpe:2.3:a:digium:asterisk:1.8.3.3
  • Digium » Asterisk » Version: 1.8.4
    cpe:2.3:a:digium:asterisk:1.8.4
  • Digium » Asterisk » Version: 1.8.4.1
    cpe:2.3:a:digium:asterisk:1.8.4.1
  • Digium » Asterisk » Version: 1.8.4.2
    cpe:2.3:a:digium:asterisk:1.8.4.2
  • Digium » Asterisk » Version: 1.8.4.3
    cpe:2.3:a:digium:asterisk:1.8.4.3
  • Digium » Asterisk » Version: 1.8.4.4
    cpe:2.3:a:digium:asterisk:1.8.4.4
  • Digium » Asterisk » Version: 1.8.5
    cpe:2.3:a:digium:asterisk:1.8.5
  • Digium » Asterisk » Version: 1.8.5.0
    cpe:2.3:a:digium:asterisk:1.8.5.0
  • Digium » Asterisk » Version: 1.8.6.0
    cpe:2.3:a:digium:asterisk:1.8.6.0
  • Digium » Asterisk » Version: 1.8.7.0
    cpe:2.3:a:digium:asterisk:1.8.7.0
  • Digium » Asterisk » Version: 1.8.7.1
    cpe:2.3:a:digium:asterisk:1.8.7.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved