CVE-2002-0505: Cisco Call Manager

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) via a series of authentication failures, e.g. via incorrect passwords.

Affected products

• Cisco Call Manager: version 3.0 only; version 3.1 only

Published 2002-08-12. Last modified 2026-06-16.