CVE-2005-2242

Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1 allows remote attackers to cause a denial of service memory consumption and restart via crafted packets to 1 the CTI Manager ctimgr.exe or 2 the CallManager ccm.exe...

CVE-2005-2241

Cisco CVE-2005-2241 affects Cisco CallManager (CCM) versions 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 before 4.1(3)SR1. The issue arises from RISDC sockets not timing out promptly, causing a resource leak that can allow remote attackers to exhaust memory and connections...

CVE-2005-2241

Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1 does not quickly time out Realtime Information Server Data Collection RISDC sockets, which results in a "resource leak" that allows remote attackers to cause a denial of service memory and...

CVE-2005-2243

Memory leak in inetinfo.exe in Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1, when Multi Level Admin MLA is enabled, allows remote attackers to cause a denial of service memory consumption via a large number of Admin Service Tool AST logi...

[Full-disclosure] Cisco Security Advisory: Cisco CallManager Memory Handling Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ======================================================================== Cisco Security Advisory: Cisco CallManager Memory Handling Vulnerabilities Revision 1.0 For Public Release 2005 July 12 1500 UTC GMT...

Cisco CallManager 1.0/2.0/3.x/4.0 - CTI Manager Remote Denial of Service

source: https://www.securityfocus.com/bid/14251/info The CallManager CTI Manager service is susceptible to a remote denial of service vulnerability. This issue is documented in Cisco bug CSCee00116, which is available to Cisco customers. This issue may be exploited to cause the affected applicati...

Cisco CallManager 1.02.03.x4.0 - CTI Manager Remote Denial of Service

Cisco CallManager 1.02.03.x4.0 - CTI Manager Remote Denial of Service source: https://www.securityfocus.com/bid/14251/info The CallManager CTI Manager service is susceptible to a remote denial of service vulnerability. This issue is documented in Cisco bug CSCee00116, which is available to Cisco...

Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces

========================================================================== Title: Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces Vulnerability Discovery: FishNet Security - http://www.fishnetsecurity.com Date: 06/08/2005 Severity: Medium - Voice VLAN locally...

CVE-2005-0186

CVE-2005-0186 affects Cisco IOS releases 12.1YD, 12.2T, 12.3 and 12.3T when ITS/CME/SRST are active. A malformed SCCP control message can trigger a device reboot (DoS). Answer: vulnerable component is IOS Telephony Service/CME/SRST handling of SCCP; root cause is malformed control protocol messag...

Cisco IOS Telephony Services DoS

DoS on SCCP control protocol parsing if configured tobe used with Cisco IOS Telephony Service ITS, Cisco CallManager Express CME or Survivable Remote Site Telephony SRST...

CVE-2004-0044

Cisco Personal Assistant 1.41 and 1.42 disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username...

CVE-2002-0505

CVE-2002-0505 concerns Cisco CallManager CTI Framework authentication. A memory leak when authentication fails (e.g., incorrect CTI/CTIFW credentials) can cause the server to crash and reload, enabling a DoS. Affected products: Cisco CallManager 3.0 and 3.1. The documented fix is to upgrade to 3....

CVE-2002-0505

Memory leak in the Call Telephony Integration CTI Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.13 allows remote attackers to cause a denial of service crash and reload via a series of authentication failures, e.g. via incorrect passwords...

CVE-2002-0505

Memory leak in the Call Telephony Integration CTI Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.13 allows remote attackers to cause a denial of service crash and reload via a series of authentication failures, e.g. via incorrect passwords...

Cisco Security Advisory: LDAP Connection Leak in CTI when User Authentication Fails

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: LDAP Connection Leak in CTI when User Authentication Fails Revision 1.0 For Public Release 2002 March 27 17:00 UTC - ------------------------------------------------------------------------------- Contents Summary Affected Products Detai...