CVE-2006-0368

CVE-2006-0368 describes a denial-of-service vulnerability affecting Cisco CallManager versions 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2. Remote attackers can exploit this by initiating numerous TCP connections to specific ports (2000, 2001, 2002, or 7727), leading to high CPU/memory consumption or filling the Windows Service Manager communication queue. This vulnerability has a CVSS score of 7.8, indicating high severity due to its network-based attack vector, low attack complexity, and complete availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.