![]() | |
| |||||||
| Home | Register | Projects | Blogs | FAQ | Calendar | Search | Today's Posts | Mark Forums Read | Free Directory | Free DNSReport | Tags |
| Notices |
| Advisories Discuss about all newly security flaws classed by CVE entries and reviewed by security experts |
CVE-2008-3903 (p_b_x, pbx)This is a discussion on "CVE-2008-3903 (p_b_x, pbx)" within the Advisories part of the Computer Security: Discussions section; Asterisk PBX 1.2 through 1.6 and Trixbox PBX 2.6.1, when running with Digest authentication and authalwaysreject enabled, generates different responses depending on whether or not a SIP username is valid, which allows remote attackers to enumerate ... |
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| Asterisk PBX 1.2 through 1.6 and Trixbox PBX 2.6.1, when running with Digest authentication and authalwaysreject enabled, generates different responses depending on whether or not a SIP username is valid, which allows remote attackers to enumerate valid usernames. More... |
| Sponsor | ||
| ||
| |
![]() |
| Thread Tools | |
| Display Modes | |
| |