CVE-2006-0368

Published: Jan 22, 2006Modified: Apr 16, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727.

Affected (23)

Products: Cisco: Call Manager

Cisco

1 product

Call Manager

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Cisco Call Manager	All versions
Cisco Call Manager	Version 1.0
Cisco Call Manager	Version 2.0
Cisco Call Manager	Version 3.0
Cisco Call Manager	Version 3.1
Cisco Call Manager	Version 3.1(2)
Cisco Call Manager	Version 3.1(3a)
Cisco Call Manager	Version 3.2
Cisco Call Manager	Version 3.3
Cisco Call Manager	Version 3.3(3)
Cisco Call Manager	Version 3.3(3)es61
Cisco Call Manager	Version 3.3(4)es25
Cisco Call Manager	Version 3.3(5)
Cisco Call Manager	Version 3.3(5)es30
Cisco Call Manager	Version 4.0
Cisco Call Manager	Version 4.0(2a)es40
Cisco Call Manager	Version 4.0(2a)es62
Cisco Call Manager	Version 4.0(2a)sr2b
Cisco Call Manager	Version 4.1(2)es33
Cisco Call Manager	Version 4.1(2)es55
Cisco Call Manager	Version 4.1(3)es07
Cisco Call Manager	Version 4.1(3)es32
Cisco Call Manager	Version 4.1(3)sr1