VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 6, 2011· Updated Jun 16, 2026

CVE-2011-2666

CVE-2011-2666

Description

The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote attackers to enumerate account names by making a series of invalid SIP requests and observing the differences in the responses for different usernames, a different vulnerability than CVE-2011-2536.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

159
  • Digium/Asterisk158 versions
    cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:*+ 157 more
    • cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.0:beta4:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.10:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.11:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.12:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.12.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.13:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.14:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.15:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.16:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.16.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.16.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.17:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.18:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.19:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.19.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.19.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.19:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.19:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.19:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.19:rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.20:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.20.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.20:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.20:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.20:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.21:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.21.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.21.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.21:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.21:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.22:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.22.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.22.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.22:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.22:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.22:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.22:rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.22:rc5:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.23:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.23.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.23.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.23:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.23:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.23:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.23:rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.24:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.24.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.24:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.25:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.25.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.25:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.26:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.26.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.26.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.26.3:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.26:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.26:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.26:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.26:rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.26:rc5:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.26:rc6:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.27:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.27.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.27:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.27:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.27:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.27:rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.27:rc5:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.28:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.28:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.29:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.29.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.29:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.30:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.30:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.30:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.31:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.31:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.31:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.32:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.32:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.33:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.33.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.33:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.33:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.34:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.34:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.34:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.35:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.35:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.36:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.36:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.37:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.37:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.38:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.38:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.39:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.39.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.39.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.39:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.40:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.40.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.40.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.40:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.40:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.40:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.41:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.41.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.41.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.41:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.4.9:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.0:rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.0:rc5:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.0:rc6:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.0:rc7:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.0:rc8:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.15:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.16:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.16.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.16.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.16:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.17:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.17.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.17.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.17.3:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.17:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.17:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.17:rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.18:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.18.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.18.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.18:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.1:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.3:rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.6:rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.6.2.6:rc2:*:*:*:*:*:*
  • Asterisk/Asteriskllm-fuzzy
    Range: 1.4.0 - 1.4.41.2, 1.6.2.0 - 1.6.2.18.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.