CVE-2006-3594: Cisco Unified Callmanager

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542.

Affected products

• Cisco Unified Callmanager: version 5.0(1) only; version 5.0(2) only; version 5.0(3) only; version 5.0(3a) only

Published 2006-07-18. Last modified 2026-06-16.