CVE-2006-0368: Cisco Call Manager

High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days.

Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727.

Affected products

• Cisco Call Manager: any version; version 1.0 only; version 2.0 only; version 3.0 only; version 3.1 only; version 3.1(2) only; …

Published 2006-01-22. Last modified 2026-06-16.