CVE-2011-4597

Related Files

SIP Username Enumerator For Asterisk

Posted Dec 23, 2011

Authored by Ben Williams

This Metasploit module exploits a SIP username enumeration vulnerability in Asterisk. Performs a REGISTER scan for numeric peer usernames having a nat setting different to global sip nat setting. Works even when alwaysauthreject=yes. For this exploit to work, the source port cannot be 5060.

tags | exploit

advisories | CVE-2011-4597

SHA-256 | 54da0d99e312b44be212dc5220e9ea0fef3a31a1f8a4b91a6f8f48f53c53ca09

Download | Favorite | View

Debian Security Advisory 2367-1

Posted Dec 19, 2011

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2367-1 - Several vulnerabilities have been discovered in Asterisk, an Open Source PBX and telephony toolkit.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2011-4597, CVE-2011-4598

SHA-256 | c775b80295c3642a135dbde3ae832771f511ca0cfd118f13568781aff541ad60

Download | Favorite | View