CVE-2005-2243: Cisco Call Manager

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail.

Affected products

• Cisco Call Manager: version 3.2 only; version 3.3 only; version 4.0 only; version 4.1 only

Published 2005-07-12. Last modified 2026-06-16.