CVE-2011-4597 Information disclosure in n/a
Remote attackers can enumerate valid SIP usernames by analyzing response port differences in Asterisk's UDP implementation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-4597?
CVE-2011-4597 is a medium-severity vulnerability in Digium Asterisk, published on 15 Dec 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series of requests.
Weakness: CWE-200
Which versions are affected by CVE-2011-4597?
It affects 1 product.
Products include Digium Asterisk.
How do I fix CVE-2011-4597?
Upgrade to a fixed version.
Is CVE-2011-4597 being exploited?
There is no known exploitation of CVE-2011-4597 in the wild and no public exploit code.
Other vulnerabilities in Digium Asterisk
Sources
Also known as DEBIAN-CVE-2011-4597, GHSA-x8j5-r4w2-j865.