Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2011-1507 | First vendor Publication | 2011-04-26 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial of service (file descriptor exhaustion and disk space exhaustion) via a series of TCP connections. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1507 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-399 | Resource Management Errors |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-02-12 | Name : Gentoo Security Advisory GLSA 201110-21 (Asterisk) File : nvt/glsa_201110_21.nasl |
| 2011-05-17 | Name : Fedora Update for asterisk FEDORA-2011-6225 File : nvt/gb_fedora_2011_6225_asterisk_fc14.nasl |
| 2011-05-12 | Name : Debian Security Advisory DSA 2225-1 (asterisk) File : nvt/deb_2225_1.nasl |
| 2011-05-12 | Name : FreeBSD Ports: asterisk14 File : nvt/freebsd_asterisk141.nasl |
| 2011-05-10 | Name : Fedora Update for asterisk FEDORA-2011-6208 File : nvt/gb_fedora_2011_6208_asterisk_fc13.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 73433 | Asterisk Multiple Products Unauthenticated Session Connection Saturation Remo... |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2011-10-25 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-21.nasl - Type : ACT_GATHER_INFO |
| 2011-05-17 | Name : The remote Fedora host is missing a security update. File : fedora_2011-6225.nasl - Type : ACT_GATHER_INFO |
| 2011-05-09 | Name : The remote Fedora host is missing a security update. File : fedora_2011-6208.nasl - Type : ACT_GATHER_INFO |
| 2011-04-27 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2225.nasl - Type : ACT_GATHER_INFO |
| 2011-04-27 | Name : The remote Fedora host is missing a security update. File : fedora_2011-5835.nasl - Type : ACT_GATHER_INFO |
| 2011-04-25 | Name : A telephony application running on the remote host is affected by multiple de... File : asterisk_ast_2011_006.nasl - Type : ACT_GATHER_INFO |
| 2011-04-22 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_3c7d565a6c6411e0813a6c626dd55a41.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:05:25 |
|
| 2024-11-28 12:25:27 |
|
| 2021-05-04 12:14:20 |
|
| 2021-04-22 01:15:35 |
|
| 2020-05-23 00:28:18 |
|
| 2016-06-29 00:19:44 |
|
| 2016-04-26 20:41:41 |
|
| 2014-02-17 11:01:45 |
|
| 2013-05-10 22:58:29 |
|
