Total vulnerabilities in the database
Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error messages depending on whether a SIP username is valid, which allows remote attackers to enumerate valid usernames via multiple crafted REGISTER messages with inconsistent usernames in the URI in the To header and the Digest in the Authorization header.
| Software | From | Fixed in |
|---|---|---|
| digium / asterisk | 1.2.1 | 1.2.1.x |
| digium / asterisk | 1.6.0-beta2 | 1.6.0-beta2.x |
| digium / asterisk | 1.2.27 | 1.2.27.x |
| digium / asterisk | 1.4.5 | 1.4.5.x |
| digium / asterisk | 1.4.22-rc3 | 1.4.22-rc3.x |
| digium / asterisk | 1.2.11 | 1.2.11.x |
| digium / asterisk | 1.6.1.0-rc4 | 1.6.1.0-rc4.x |
| digium / asterisk | 1.4.26-rc4 | 1.4.26-rc4.x |
| digium / asterisk | 1.6.1.8 | 1.6.1.8.x |
| digium / asterisk | 1.2.0-beta1 | 1.2.0-beta1.x |
| digium / asterisk | 1.2.26.2-netsec | 1.2.26.2-netsec.x |
| digium / asterisk | 1.6.0-beta4 | 1.6.0-beta4.x |
| digium / asterisk | 1.2.26 | 1.2.26.x |
| digium / asterisk | 1.2.12 | 1.2.12.x |
| digium / asterisk | 1.6.1.7-rc1 | 1.6.1.7-rc1.x |
| digium / asterisk | 1.6.1.5-rc1 | 1.6.1.5-rc1.x |
| digium / asterisk | 1.6.0-beta8 | 1.6.0-beta8.x |
| digium / asterisk | 1.6.0-beta9 | 1.6.0-beta9.x |
| digium / asterisk | 1.2.21.1-netsec | 1.2.21.1-netsec.x |
| digium / asterisk | 1.4.26-rc5 | 1.4.26-rc5.x |
| digium / asterisk | 1.4.0-beta4 | 1.4.0-beta4.x |
| digium / asterisk | 1.2.30.1 | 1.2.30.1.x |
| digium / asterisk | 1.4.0-beta2 | 1.4.0-beta2.x |
| digium / asterisk | 1.4.26.2 | 1.4.26.2.x |
| digium / asterisk | 1.2.12-netsec | 1.2.12-netsec.x |
| digium / asterisk | 1.2.31.1 | 1.2.31.1.x |
| digium / asterisk | 1.4.19.2 | 1.4.19.2.x |
| digium / asterisk | 1.2.29 | 1.2.29.x |
| digium / asterisk | 1.2.10 | 1.2.10.x |
| digium / asterisk | 1.6.0.14-rc1 | 1.6.0.14-rc1.x |
| digium / asterisk | 1.2.28 | 1.2.28.x |
| digium / asterisk | 1.4.26.1 | 1.4.26.1.x |
| digium / asterisk | 1.6.1.0-rc5 | 1.6.1.0-rc5.x |
| digium / asterisk | 1.6.1.3-rc1 | 1.6.1.3-rc1.x |
| digium / asterisk | 1.4.20-rc1 | 1.4.20-rc1.x |
| digium / asterisk | 1.4.16 | 1.4.16.x |
| digium / asterisk | 1.4.3 | 1.4.3.x |
| digium / asterisk | 1.2.26-netsec | 1.2.26-netsec.x |
| digium / asterisk | 1.6.0.3-rc1 | 1.6.0.3-rc1.x |
| digium / asterisk | 1.2.21 | 1.2.21.x |
| digium / asterisk | 1.4.19.1 | 1.4.19.1.x |
| digium / asterisk | 1.2.3 | 1.2.3.x |
| digium / asterisk | 1.2.20 | 1.2.20.x |
| digium / asterisk | 1.2.13-netsec | 1.2.13-netsec.x |
| digium / asterisk | 1.2.10-netsec | 1.2.10-netsec.x |
| digium / asterisk | 1.2.22 | 1.2.22.x |
| digium / asterisk | 1.6.0.10 | 1.6.0.10.x |
| digium / asterisk | 1.6.0 | 1.6.0.x |
| digium / asterisk | 1.4.4 | 1.4.4.x |
| digium / asterisk | 1.2.32 | 1.2.32.x |
| digium / asterisk | 1.4.23-rc4 | 1.4.23-rc4.x |
| digium / asterisk | 1.6.1.2 | 1.6.1.2.x |
| digium / asterisk | 1.2.17-netsec | 1.2.17-netsec.x |
| digium / asterisk | 1.6.0.11-rc2 | 1.6.0.11-rc2.x |
| digium / asterisk | 1.4.22 | 1.4.22.x |
| digium / asterisk | 1.6.1.6 | 1.6.1.6.x |
| digium / asterisk | 1.4.0 | 1.4.0.x |
| digium / asterisk | 1.6.0.11-rc1 | 1.6.0.11-rc1.x |
| digium / asterisk | 1.6.0-beta1 | 1.6.0-beta1.x |
| digium / asterisk | 1.6.0-beta3 | 1.6.0-beta3.x |
| digium / asterisk | 1.2.26.1 | 1.2.26.1.x |
| digium / asterisk | 1.2.19 | 1.2.19.x |
| digium / asterisk | 1.4.22.2 | 1.4.22.2.x |
| digium / asterisk | 1.2.20-netsec | 1.2.20-netsec.x |
| digium / asterisk | 1.2.23-netsec | 1.2.23-netsec.x |
| digium / asterisk | 1.6.1.5 | 1.6.1.5.x |
| digium / asterisk | 1.4.26-rc3 | 1.4.26-rc3.x |
| digium / asterisk | 1.4.6 | 1.4.6.x |
| digium / asterisk | 1.6.1.0 | 1.6.1.0.x |
| digium / asterisk | 1.4.20 | 1.4.20.x |
| digium / asterisk | 1.4.22.1 | 1.4.22.1.x |
| digium / asterisk | 1.2.0-rc2 | 1.2.0-rc2.x |
| digium / asterisk | 1.4.12.1 | 1.4.12.1.x |
| digium / asterisk | 1.2.30.4 | 1.2.30.4.x |
| digium / asterisk | 1.2.13 | 1.2.13.x |
| digium / asterisk | 1.4.2 | 1.4.2.x |
| digium / asterisk | 1.4.19 | 1.4.19.x |
| digium / asterisk | 1.4.20-rc3 | 1.4.20-rc3.x |
| digium / asterisk | 1.6.0.16 | 1.6.0.16.x |
| digium / asterisk | 1.2.30.2 | 1.2.30.2.x |
| digium / asterisk | 1.4.18 | 1.4.18.x |
| digium / asterisk | 1.2.15-netsec | 1.2.15-netsec.x |
| digium / asterisk | 1.4.21-rc2 | 1.4.21-rc2.x |
| digium / asterisk | 1.2.23 | 1.2.23.x |
| digium / asterisk | 1.6.0.5 | 1.6.0.5.x |
| digium / asterisk | 1.4.22-rc1 | 1.4.22-rc1.x |
| digium / asterisk | 1.2.28.1 | 1.2.28.1.x |
| digium / asterisk | 1.2.30.3 | 1.2.30.3.x |
| digium / asterisk | 1.4.10 | 1.4.10.x |
| digium / asterisk | 1.6.0.14 | 1.6.0.14.x |
| digium / asterisk | 1.6.0.11 | 1.6.0.11.x |
| digium / asterisk | 1.2.22-netsec | 1.2.22-netsec.x |
| digium / asterisk | 1.6.0.16-rc2 | 1.6.0.16-rc2.x |
| digium / asterisk | 1.2.2-netsec | 1.2.2-netsec.x |
| digium / asterisk | 1.6.0.7 | 1.6.0.7.x |
| digium / asterisk | 1.6.1.10-rc2 | 1.6.1.10-rc2.x |
| digium / asterisk | 1.6.0.2 | 1.6.0.2.x |
| digium / asterisk | 1.4.24.1 | 1.4.24.1.x |
| digium / asterisk | 1.4.10.1 | 1.4.10.1.x |
| digium / asterisk | 1.4.16.1 | 1.4.16.1.x |
| digium / asterisk | 1.2.24-netsec | 1.2.24-netsec.x |
| digium / asterisk | 1.4.19-rc4 | 1.4.19-rc4.x |
| digium / asterisk | 1.4.25-rc1 | 1.4.25-rc1.x |
| digium / asterisk | 1.6.0-rc6 | 1.6.0-rc6.x |
| digium / asterisk | 1.4.25 | 1.4.25.x |
| digium / asterisk | 1.2.3-netsec | 1.2.3-netsec.x |
| digium / asterisk | 1.4.11 | 1.4.11.x |
| digium / asterisk | 1.4.23 | 1.4.23.x |
| digium / asterisk | 1.4.7 | 1.4.7.x |
| digium / asterisk | 1.6.0-rc4 | 1.6.0-rc4.x |
| digium / asterisk | 1.2.21-netsec | 1.2.21-netsec.x |
| digium / asterisk | 1.4.7.1 | 1.4.7.1.x |
| digium / asterisk | 1.4.26-rc2 | 1.4.26-rc2.x |
| digium / asterisk | 1.4.22-rc2 | 1.4.22-rc2.x |
| digium / asterisk | 1.4.15 | 1.4.15.x |
| digium / asterisk | 1.6.0-rc5 | 1.6.0-rc5.x |
| digium / asterisk | 1.2.25-netsec | 1.2.25-netsec.x |
| digium / asterisk | 1.2.18 | 1.2.18.x |
| digium / asterisk | 1.6.0.16-rc1 | 1.6.0.16-rc1.x |
| digium / asterisk | 1.4.19-rc3 | 1.4.19-rc3.x |
| digium / asterisk | 1.2.33 | 1.2.33.x |
| digium / asterisk | 1.2.0-beta2 | 1.2.0-beta2.x |
| digium / asterisk | 1.6.0-beta7 | 1.6.0-beta7.x |
| digium / asterisk | 1.6.0.1 | 1.6.0.1.x |
| digium / asterisk | 1.2.15 | 1.2.15.x |
| digium / asterisk | 1.2.17 | 1.2.17.x |
| digium / asterisk | 1.4.23-rc1 | 1.4.23-rc1.x |
| digium / asterisk | 1.2.30 | 1.2.30.x |
| digium / asterisk | 1.2.14 | 1.2.14.x |
| digium / asterisk | 1.4.25.1 | 1.4.25.1.x |
| digium / asterisk | 1.4.21.1 | 1.4.21.1.x |
| digium / asterisk | 1.4.19-rc2 | 1.4.19-rc2.x |
| digium / asterisk | 1.4.9 | 1.4.9.x |
| digium / asterisk | 1.2.11-netsec | 1.2.11-netsec.x |
| digium / asterisk | 1.4.12 | 1.4.12.x |
| digium / asterisk | 1.4.20-rc2 | 1.4.20-rc2.x |
| digium / asterisk | 1.6.0.4-rc1 | 1.6.0.4-rc1.x |
| digium / asterisk | 1.2.0 | 1.2.0.x |
| digium / asterisk | 1.2.18-netsec | 1.2.18-netsec.x |
| digium / asterisk | 1.4.19-rc1 | 1.4.19-rc1.x |
| digium / asterisk | 1.4.13 | 1.4.13.x |
| digium / asterisk | 1.6.0.6 | 1.6.0.6.x |
| digium / asterisk | 1.6.0-beta6 | 1.6.0-beta6.x |
| digium / asterisk | 1.4.21.2 | 1.4.21.2.x |
| digium / asterisk | 1.2.19-netsec | 1.2.19-netsec.x |
| digium / asterisk | 1.6.0.15 | 1.6.0.15.x |
| digium / asterisk | 1.2.12.1 | 1.2.12.1.x |
| digium / asterisk | 1.6.0.9 | 1.6.0.9.x |
| digium / asterisk | 1.4.17 | 1.4.17.x |
| digium / asterisk | 1.2.26.1-netsec | 1.2.26.1-netsec.x |
| digium / asterisk | 1.6.1.4 | 1.6.1.4.x |
| digium / asterisk | 1.4.23-rc2 | 1.4.23-rc2.x |
| digium / asterisk | 1.4.22-rc4 | 1.4.22-rc4.x |
| digium / asterisk | 1.4.22-rc5 | 1.4.22-rc5.x |
| digium / asterisk | 1.2.34 | 1.2.34.x |
| digium / asterisk | 1.6.1.7-rc2 | 1.6.1.7-rc2.x |
| digium / asterisk | 1.4.21-rc1 | 1.4.21-rc1.x |
| digium / asterisk | 1.4.26-rc1 | 1.4.26-rc1.x |
| digium / asterisk | 1.4.26-rc6 | 1.4.26-rc6.x |
| digium / asterisk | 1.4.1 | 1.4.1.x |
| digium / asterisk | 1.2.24 | 1.2.24.x |
| digium / asterisk | 1.2.2 | 1.2.2.x |
| digium / asterisk | 1.2.16 | 1.2.16.x |
| digium / asterisk | 1.4.14 | 1.4.14.x |
| digium / asterisk | 1.2.21.1 | 1.2.21.1.x |
| digium / asterisk | 1.6.1.0-rc2 | 1.6.1.0-rc2.x |
| digium / asterisk | 1.4.20.1 | 1.4.20.1.x |
| digium / asterisk | 1.4.24 | 1.4.24.x |
| digium / asterisk | 1.6.0.8 | 1.6.0.8.x |
| digium / asterisk | 1.2.31 | 1.2.31.x |
| digium / asterisk | 1.4.0-beta1 | 1.4.0-beta1.x |
| digium / asterisk | 1.4.24-rc1 | 1.4.24-rc1.x |
| digium / asterisk | 1.6.0.3 | 1.6.0.3.x |
| digium / asterisk | 1.6.1.0-rc3 | 1.6.1.0-rc3.x |
| digium / asterisk | 1.6.1.10-rc1 | 1.6.1.10-rc1.x |
| digium / asterisk | 1.4.26 | 1.4.26.x |
| digium / asterisk | 1.4.16.2 | 1.4.16.2.x |
| digium / asterisk | 1.4.23.2 | 1.4.23.2.x |
| digium / asterisk | 1.2.0-rc1 | 1.2.0-rc1.x |
| digium / asterisk | 1.2.16-netsec | 1.2.16-netsec.x |
| digium / asterisk | 1.4.23.1 | 1.4.23.1.x |
| digium / asterisk | 1.4.23-rc3 | 1.4.23-rc3.x |
| digium / asterisk | 1.4.8 | 1.4.8.x |
| digium / asterisk | 1.6.0-beta7.1 | 1.6.0-beta7.1.x |
| digium / asterisk | 1.2.12.1-netsec | 1.2.12.1-netsec.x |
| digium / asterisk | 1.2.26.2 | 1.2.26.2.x |
| digium / asterisk | 1.4.0-beta3 | 1.4.0-beta3.x |
| digium / asterisk | 1.6.1.1 | 1.6.1.1.x |
| digium / asterisk | 1.4.21 | 1.4.21.x |
| digium / asterisk | 1.2.25 | 1.2.25.x |
| digium / asterisk | 1.6.0-beta5 | 1.6.0-beta5.x |
| digium / asterisknow | 1.5 | 1.5.x |
| digium / s800i | 1.3.0.3 | 1.3.0.3.x |
| digium / s800i | 1.3.0.2 | 1.3.0.2.x |
| digium / s800i | 1.3.0 | 1.3.0.x |
| digium / s800i | 1.3.0.4 | 1.3.0.4.x |
| digium / asterisk | b | b.x |
| digium / asterisk | b.2.3.4 | b.2.3.4.x |
| digium / asterisk | b.2.3.3 | b.2.3.3.x |
| digium / asterisk | b.2.3.6 | b.2.3.6.x |
| digium / asterisk | c.2.3 | c.2.3.x |
| digium / asterisk | b.1.3.3 | b.1.3.3.x |
| digium / asterisk | b.1.3.2 | b.1.3.2.x |
| digium / asterisk | b.2.3.1 | b.2.3.1.x |
| digium / asterisk | b.2.5.0 | b.2.5.0.x |
| digium / asterisk | b.2.5.3 | b.2.5.3.x |
| digium / asterisk | c.3.0 | c.3.0.x |
| digium / asterisk | b.2.2.0 | b.2.2.0.x |
| digium / asterisk | b.2.5.1 | b.2.5.1.x |
| digium / asterisk | c | c.x |
| digium / asterisk | b.2.2.1 | b.2.2.1.x |
| digium / asterisk | b.2.3.2 | b.2.3.2.x |
| digium / asterisk | a | a.x |
| digium / asterisk | b.2.5.2 | b.2.5.2.x |
| digium / asterisk | b.2.3.5 | b.2.3.5.x |