CVE-2009-5140

The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.

• CWE-307

• http://voipsa.org/pipermail/voipsec_voipsa.org/2009-April/002946.htmlMailing List, Third Party Advisory
• https://resources.enablesecurity.com/resources/sipdigestleak-tut.pdfMailing List, Third Party Advisory
• http://voipsa.org/pipermail/voipsec_voipsa.org/2009-April/002946.htmlMailing List, Third Party Advisory
• https://resources.enablesecurity.com/resources/sipdigestleak-tut.pdfMailing List, Third Party Advisory

Published

Feb 12, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-5134Buffer overflow in the "create torrent dialog" functionality…
• CVE-2009-5135The Java XML parser in Echo before 2.1.1 and 3.x before 3.0.…
• CVE-2009-5136The policy definition evaluator in Condor before 7.4.2 does …
• CVE-2009-5137Stack-based buffer overflow in Mini-stream CastRipper 2.50.7…
• CVE-2009-5138GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA…
• CVE-2009-5139The SIP implementation on the Gizmo5 software phone provides…7.5
• CVE-2009-5141Format string vulnerability in War FTP Daemon (warftpd) 1.82…
• CVE-2009-5142Cross-site scripting (XSS) vulnerability in timthumb.php in …
• CVE-2009-5143GE Healthcare Discovery 530C has a password of #bigguy1 for …
• CVE-2009-5144mod-gnutls does not validate client certificates when "GnuTL…
• CVE-2009-5145Cross-site scripting (XSS) vulnerability in ZMI pages that u…
• CVE-2009-5146Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…