Lucene search

K
nvd[email protected]NVD:CVE-2006-0368
HistoryJan 22, 2006 - 8:03 p.m.

CVE-2006-0368

2006-01-2220:03:00
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.063 Low

EPSS

Percentile

93.6%

Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727.

Affected configurations

NVD
Node
ciscocall_manager
OR
ciscocall_managerMatch1.0
OR
ciscocall_managerMatch2.0
OR
ciscocall_managerMatch3.0
OR
ciscocall_managerMatch3.1
OR
ciscocall_managerMatch3.1\(2\)
OR
ciscocall_managerMatch3.1\(3a\)
OR
ciscocall_managerMatch3.2
OR
ciscocall_managerMatch3.3
OR
ciscocall_managerMatch3.3\(3\)
OR
ciscocall_managerMatch3.3\(3\)es61
OR
ciscocall_managerMatch3.3\(4\)es25
OR
ciscocall_managerMatch3.3\(5\)
OR
ciscocall_managerMatch3.3\(5\)es30
OR
ciscocall_managerMatch4.0
OR
ciscocall_managerMatch4.0\(2a\)es40
OR
ciscocall_managerMatch4.0\(2a\)es62
OR
ciscocall_managerMatch4.0\(2a\)sr2b
OR
ciscocall_managerMatch4.1\(2\)es33
OR
ciscocall_managerMatch4.1\(2\)es55
OR
ciscocall_managerMatch4.1\(3\)es07
OR
ciscocall_managerMatch4.1\(3\)es32
OR
ciscocall_managerMatch4.1\(3\)sr1

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.063 Low

EPSS

Percentile

93.6%

Related for NVD:CVE-2006-0368