CVE-2005-2243 Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote....
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco call manager | = 3.2 | No fix listed |
| cisco call manager | = 3.3 | No fix listed |
| cisco call manager | = 4.0 | No fix listed |
| cisco call manager | = 4.1 | No fix listed |
References
- 20050712 Cisco CallManager Memory Handling Vulnerabilities patch vendor-advisory
- 14253 vdb-entry