First published: Tue Jul 12 2005(Updated: )
Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco CallManager Express | =4.1 | |
Cisco CallManager Express | =3.2 | |
Cisco CallManager Express | =3.3 | |
Cisco CallManager Express | =4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-2243 has a moderate severity level due to its potential for causing denial of service through memory consumption.
To fix CVE-2005-2243, upgrade your Cisco CallManager to a version that is patched against this vulnerability.
CVE-2005-2243 affects Cisco CallManager versions 3.2, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 before 4.1(3)SR1.
The memory leak in CVE-2005-2243 is caused by the handling of a large number of requests to the Admin Service Tool when Multi Level Admin is enabled.
Currently, there are no recommended workarounds for CVE-2005-2243 other than applying the necessary updates.