GCVE - cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*

part: h version: 4.0 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Call Manager (`9999a58d-5e0f-5fcc-81e0-546f89cf4af9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-0368`	vulnerable	2026-06-08 04:48:53.631344	Details available Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727. Published: 2006-01-22T20:00:00.000Z Updated: 2024-08-07T16:34:14.807Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1015503 http://www.vupen.com/english/advisories/2006/0249 http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmdos.shtml https://exchange.xforce.ibmcloud.com/vulnerabilities/24180 http://www.securityfocus.com/bid/16295	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0367`	vulnerable	2026-06-08 04:48:53.625239	Details available Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page." Published: 2006-01-22T20:00:00.000Z Updated: 2024-08-07T16:34:13.895Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18501 http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml http://www.securityfocus.com/bid/16293 https://exchange.xforce.ibmcloud.com/vulnerabilities/24172 http://securitytracker.com/id?1015502	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2244`	vulnerable	2026-06-08 04:48:28.704513	Details available The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure and lead to a buffer overflow. Published: 2005-07-12T04:00:00.000Z Updated: 2024-08-07T22:22:47.673Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/19053 http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml http://www.securityfocus.com/bid/14255	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2243`	vulnerable	2026-06-08 04:48:28.704170	Details available Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail. Published: 2005-07-12T04:00:00.000Z Updated: 2024-08-07T22:22:47.559Z Open on db.gcve.eu Reference links http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml http://www.securityfocus.com/bid/14253	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2242`	not_vulnerable	2026-06-08 04:48:28.703838	Details available Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to cause a denial of service (memory consumption and restart) via crafted packets to (1) the CTI Manager (ctimgr.exe) or (2) the CallManager (ccm.exe). Published: 2005-07-12T04:00:00.000Z Updated: 2024-08-07T22:22:48.417Z Open on db.gcve.eu Reference links http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml http://www.securityfocus.com/bid/14251 http://www.securityfocus.com/bid/14252	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2241`	vulnerable	2026-06-08 04:48:28.702776	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0356`	vulnerable	2026-06-08 04:48:12.358809	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1760`	vulnerable	2026-06-08 04:48:07.522430	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1759`	vulnerable	2026-06-08 04:48:07.513583	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.