Description
Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727.
References
- 1015503 vdb-entry
- ADV-2006-0249 vdb-entry
- 20060118 Cisco Call Manager Denial of Service vendor-advisory
- cisco-callmanager-port-connection-dos(24180) vdb-entry
- 16295 vdb-entry
- 22623 vdb-entry
- 22622 vdb-entry
- 359 third-party-advisory
- 18494 third-party-advisory