PT-2005-3170 · Cisco · Cisco Callmanager

Publicado 2005-07-12 · Atualizado 2008-09-05 · CVE-2005-2241

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco CallManager versions 3.2 and earlier Cisco CallManager version 3.3 before 3.3(5) Cisco CallManager version 4.0 before 4.0(2a)SR2b Cisco CallManager version 4.1 before 4.1(3)SR1

Description: The issue results in a resource leak, allowing remote attackers to cause a denial of service by consuming memory and connections in RisDC.exe, due to the failure to quickly time out Realtime Information Server Data Collection sockets.

Recommendations: For Cisco CallManager versions 3.2 and earlier, update to a version later than 3.2 to resolve the issue. For Cisco CallManager version 3.3 before 3.3(5), update to version 3.3(5) or later to resolve the issue. For Cisco CallManager version 4.0 before 4.0(2a)SR2b, update to version 4.0(2a)SR2b or later to resolve the issue. For Cisco CallManager version 4.1 before 4.1(3)SR1, update to version 4.1(3)SR1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-2241

Produtos afetados

Cisco Callmanager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-2241 · Nota de Segurança
• http://securityfocus.com/bid/14250 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml · Aviso do Fabricante