CVE-2002-0505

Cisco CallManager 3.0-3.1 - Denial of Service via CTI Framework Authentication Failures

Title source: llm
STIX 2.1

Description

Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) via a series of authentication failures, e.g. via incorrect passwords.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/callmanager-ctifw-leak-pub.shtml
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4370
Patch, Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/8655.php

Scores

EPSS 0.0177
EPSS Percentile 75.8%

Details

Status published
Products (2)
cisco/call_manager 3.0
cisco/call_manager 3.1
Published Aug 12, 2002
Tracked Since Feb 18, 2026