This script is Copyright (C) 2011-2014 Tenable Network Security, Inc.
The SIP server on the remote host allows the enumeration of users.
The SIP server on the remote host appears to respond differently to
registration requests for valid and invalid usernames. Using that
fact, Nessus was able to enumerate some of the valid usernames.
See also :
Configure the SIP server to respond identically to valid and invalid
usernames. This can be done in Asterisk, for example, by setting
'alwaysauthreject=yes' in sip.conf.
Risk factor :
Medium / CVSS Base Score : 5.0
Nessus Plugin ID: 56983 ()
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.