asterisk: information disclosure
| Package(s): | asterisk | CVE #(s): | CVE-2009-0041 | ||||||||||||||||||||||||
| Created: | February 13, 2009 | Updated: | December 15, 2009 | ||||||||||||||||||||||||
| Description: | IAX2 authentication in Asterisk provides different responses for non-existent accounts and password mismatches, allowing an attacker to determine whether specific accounts exist. See the Asterisk security report for details. | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||