Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Call_manager | Cisco | 3.2 (including) | 3.2 (including) |
| Call_manager | Cisco | 3.3 (including) | 3.3 (including) |
| Call_manager | Cisco | 4.0 (including) | 4.0 (including) |
| Call_manager | Cisco | 4.1 (including) | 4.1 (including) |