CVE-2006-0368

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

Design/Logic Flaw

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

CVE-2006-0368

CVE-2006-0368 affects Cisco CallManager versions 3.2 and earlier; 3.3 before 3.3(5)SR1; 4.0 before 4.0(2a)SR2c; and 4.1 before 4.1(3)SR2. It enables remote attackers to cause denial of service by opening a large number of TCP connections to port 2000 (CPU/memory consumption) and to ports 2001, 20...

CVE-2006-0368

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

CVE-2006-0367

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

CVE-2006-0367

CVE-2006-0367 affects Cisco CallManager up to versions 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2. The issue is a privilege-escalation vulnerability where remote authenticated users with read-only administrative privileges can obtain full admin privile...

Cisco Security Advisory: Cisco Call Manager Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Call Manager Denial of Service Advisory ID: cisco-sa-20060118-ccmdos http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmdos.shtml Revision 1.0 ============ For Public Release 2006 January 18 1600 UTC GMT -...

[VulnWatch] Cisco Security Advisory: Cisco Call Manager Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Call Manager Privilege Escalation Advisory ID: cisco-sa-20060118-ccmpe http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml Revision 1.0 ============ For Public Release 2006 January 18 1600 UTC GMT -...

Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation ===================================================================== Advisory ID: cisco-sa-20051129-csa http://www.cisco.com/warp/public/707/cisco-sa-20051129-csa.shtml...

Cisco CallManager TFTP File Detection

The remote host has a TFTP server installed that is serving one or more Cisco CallManager files. These files do not themselves include any sensitive information, but do identify the TFTP server as being part of a Cisco CallManager environment. The CCM TFTP server is an essential part of providing...

[Full-disclosure] PatchAdvisor Vulnerability Alert - Cisco CallManager Remote Denial of Service Vulnerability

PatchAdvisor, Inc. www.patchadvisor.com ============================================================================ = PATCHADVISOR VULNERABILITY ALERT = = Cisco CallManager CTI Manager Remote Denial Of Service Vulnerability =...

Cisco CallManager Memory Handling Vulnerabilities

...

CVE-2005-2242

Cisco CallManager (CCM) versions affected: 3.2 and earlier; 3.3 before 3.3(5); 4.0 before 4.0(2a)SR2b; and 4.1 before 4.1(3)SR1. The issue allows remote attackers to cause a denial of service (memory consumption and restart) by sending crafted packets to CTI Manager (ctimgr.exe) or CallManager (c...

CVE-2005-2244

The aupair service aupair.exe in Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure and lead to a buffer overflow...

CVE-2005-2244

The CVE-2005-2244 entry concerns Cisco CallManager (CCM) prior to certain 3.x/4.x releases, where the aupair.exe service is vulnerable. A crafted packet can trigger a memory allocation failure, leading to a buffer overflow and allowing remote code execution or memory corruption. Affected products...

CVE-2005-2243

Memory leak in inetinfo.exe in Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1, when Multi Level Admin MLA is enabled, allows remote attackers to cause a denial of service memory consumption via a large number of Admin Service Tool AST logi...

CVE-2005-2241

Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1 does not quickly time out Realtime Information Server Data Collection RISDC sockets, which results in a "resource leak" that allows remote attackers to cause a denial of service memory and...

CVE-2005-2242

Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1 allows remote attackers to cause a denial of service memory consumption and restart via crafted packets to 1 the CTI Manager ctimgr.exe or 2 the CallManager ccm.exe...

CVE-2005-2243

Cisco CallManager (CCM) memory leak: inetinfo.exe vulnerability affects CCM v3.2 and earlier, v3.3 before 3.3(5), v4.0 before 4.0(2a)SR2b, and v4.1 before 4.1(3)SR1, with MLA enabled. Remote attackers can cause memory exhaustion/DoS by triggering a large number of failing Admin Service Tool (AST)...

CVE-2005-2244

The aupair service aupair.exe in Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure and lead to a buffer overflow...