PT-2005-3172 · Cisco · Cisco Callmanager

Published 2005-07-12 · Updated 2008-09-05 · CVE-2005-2243

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco CallManager versions 3.2 and earlier Cisco CallManager version 3.3 before 3.3(5) Cisco CallManager version 4.0 before 4.0(2a)SR2b Cisco CallManager version 4.1 before 4.1(3)SR1

Description: A memory leak in the inetinfo.exe process occurs when the Multi Level Admin (MLA) feature is enabled, allowing remote attackers to cause a denial of service by consuming memory via a large number of failed Admin Service Tool (AST) logins.

Recommendations: For Cisco CallManager versions 3.2 and earlier, update to a version later than 3.2. For Cisco CallManager version 3.3 before 3.3(5), update to version 3.3(5) or later. For Cisco CallManager version 4.0 before 4.0(2a)SR2b, update to version 4.0(2a)SR2b or later. For Cisco CallManager version 4.1 before 4.1(3)SR1, update to version 4.1(3)SR1 or later.

Fix

Related Identifiers

CVE-2005-2243

Affected Products

Cisco Callmanager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-2243 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml · Vendor Advisory
• http://securityfocus.com/bid/14253 · Note