AST-2011-011: Possible enumeration of SIP users due to differing authentication responses