vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2009-0041

N/A
Published: January 14, 2009 at 11:00 PM UTC
Updated: June 16, 2026 at 11:04 PM UTC
3 products affected across 1 vendorOpen SourceAsterisk Business EditionS800I Appliance

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 3%

Description

IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Asterisk Business Edition· Asterisk
95%
v ≤ b.2.5.2v ≤ c.1.0ab.1.3.2b.1.3.3b.2.2.0b.2.2.1b.2.3.1b.2.3.2b.2.3.3b.2.3.4b.2.3.5b.2.3.6b.2.5.0b.2.5.1b.2.5.3beta8c.1.0 beta7
Open Source· Asterisk
95%
v ≤ 1.2.30.4v ≤ 1.4.23v ≤ 1.6.0.31.2.01.2.0 beta11.2.0 beta21.2.0 rc11.2.0 rc21.2.0beta11.2.0beta21.2.11.2.101.2.10 netsec1.2.111.2.11 netsec1.2.121.2.12 netsec1.2.12.11.2.12.1 netsec1.2.131.2.13 netsec1.2.141.2.14 netsec1.2.151.2.15 netsec1.2.161.2.16 netsec1.2.171.2.17 netsec1.2.181.2.18 netsec1.2.191.2.19 netsec1.2.21.2.2 netsec1.2.201.2.20 netsec1.2.211.2.21 netsec1.2.21.11.2.21.1 netsec1.2.221.2.22 netsec1.2.231.2.23 netsec1.2.241.2.24 netsec1.2.251.2.25 netsec1.2.261.2.26 netsec1.2.26.11.2.26.1 netsec1.2.26.21.2.26.2 netsec1.2.271.2.281.2.291.2.31.2.3 netsec1.2.301.2.30.21.2.30.31.4.01.4.0 beta21.4.0 beta31.4.0 beta41.4.11.4.101.4.10.11.4.111.4.121.4.12.11.4.131.4.141.4.151.4.161.4.16.11.4.16.21.4.171.4.181.4.18.11.4.191.4.19 rc11.4.19 rc21.4.19 rc31.4.19 rc41.4.19.11.4.19.21.4.21.4.201.4.20 rc11.4.20 rc21.4.20 rc31.4.211.4.21 rc11.4.21 rc21.4.21.11.4.21.21.4.221.4.22 rc31.4.22 rc41.4.22.11.4.22.21.4.231.4.23 rc11.4.23 rc21.4.31.4.41.4.51.4.61.4.71.4.7.11.4.81.4.91.4_revision_959461.4beta1.6.0 beta11.6.0 beta21.6.0 beta31.6.0 beta41.6.0 beta51.6.0 beta71.6.0 beta7.11.6.0 beta81.6.0 beta91.6.0 rc41.6.0 rc51.6.0 rc61.6.0.11.6.0.21.6.0.3rc1rc3
S800I Appliance· Asterisk
95%
1.2

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (11)

x_refsource_CONFIRM
Source: [email protected]
http://downloads.digium.com/pub/security/AST-2009-001.html
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/33453
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/34982
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/37677
Vendor Advisoryx_refsource_GENTOO
Source: [email protected]
http://security.gentoo.org/glsa/glsa-200905-01.xml
Third Party Advisoryx_refsource_SREASON
Source: [email protected]
http://securityreason.com/securityalert/4910
Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2009/dsa-1952
Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/499884/100/0/threaded

CVSS

5MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-200

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card