PT-2005-3171 · Cisco · Cisco Callmanager

Publicado 2005-07-12 · Atualizado 2008-09-05 · CVE-2005-2242

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco CallManager (CCM) versions 3.2 and earlier Cisco CallManager (CCM) version 3.3 before 3.3(5) Cisco CallManager (CCM) version 4.0 before 4.0(2a)SR2b Cisco CallManager (CCM) version 4.1 before 4.1(3)SR1

Description: The issue allows remote attackers to cause a denial of service, resulting in memory consumption and restart, via crafted packets to either the CTI Manager (ctimgr.exe) or the CallManager (ccm.exe).

Recommendations: For Cisco CallManager (CCM) versions 3.2 and earlier, update to a version later than 3.2. For Cisco CallManager (CCM) version 3.3 before 3.3(5), update to version 3.3(5) or later. For Cisco CallManager (CCM) version 4.0 before 4.0(2a)SR2b, update to version 4.0(2a)SR2b or later. For Cisco CallManager (CCM) version 4.1 before 4.1(3)SR1, update to version 4.1(3)SR1 or later.

Exploit

Correção

Identificadores relacionados

CVE-2005-2242

Produtos afetados

Cisco Callmanager

Referências · 5

• 🔥 https://exploit-db.com/exploits/25967 · Exploit
• http://securityfocus.com/bid/14252 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/14251 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2242 · Nota de Segurança