Cisco Unity 4.x before 4.2(1)ES161 5.x before 5.0(1)ES53 and 7.x before 7.0(2)ES8 when using anonymous authentication (aka native Unity authentication) allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections.