Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*

part: h version: 3.1 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductCall Manager (9999a58d-5e0f-5fcc-81e0-546f89cf4af9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-0368 vulnerable 2026-06-08 04:48:53.629462 Details available
Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727.
Published: 2006-01-22T20:00:00.000Z
Updated: 2024-08-07T16:34:14.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0367 vulnerable 2026-06-08 04:48:53.620443 Details available
Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."
Published: 2006-01-22T20:00:00.000Z
Updated: 2024-08-07T16:34:13.895Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0356 vulnerable 2026-06-08 04:48:12.358700 Details available
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
Published: 2005-05-31T04:00:00.000Z
Updated: 2024-08-07T21:13:53.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1760 vulnerable 2026-06-08 04:48:07.522328 Details available
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
Published: 2005-03-10T05:00:00.000Z
Updated: 2024-08-08T01:00:37.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1759 vulnerable 2026-06-08 04:48:07.510551 Details available
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.
Published: 2005-03-10T05:00:00.000Z
Updated: 2024-08-08T01:00:37.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0505 vulnerable 2026-06-08 04:46:21.588588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.