QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-3903

Back to search

CVE-2008-3903

Published: Sep 4, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Asterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and 1.6.0.x before 1.6.0.8; Asterisk Business Edition A.x.x, B.x.x before B.2.5.8, C.1.x.x before C.1.10.5, and C.2.x.x before C.2.3.3; s800i 1.3.x before 1.3.0.2; and Trixbox PBX 2.6.1, when Digest authentication and authalwaysreject are enabled, generates different responses depending on whether a SIP username is valid, which allows remote attackers to enumerate valid usernames.

VendorProductVersions

n/a

n/a

affected
n/a

References

GLSA-200905-01
vendor-advisory
x_refsource_GENTOO
34353
vdb-entry
x_refsource_BID
37677
third-party-advisory
x_refsource_SECUNIA
DSA-1952
vendor-advisory
x_refsource_DEBIAN
http://misel.com/?p=52
x_refsource_MISC
ADV-2009-0933
vdb-entry
x_refsource_VUPEN
34982
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now