Lucene search

CiscoCVE-2008-2732

HistorySep 04, 2008 - 4:41 p.m.

CVE-2008-2732

2008-09-0416:41:00

cisco

web.nvd.nist.gov

cve-2008-2732

sip inspection

cisco

pix

asa

denial of service

vulnerability

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

Low

EPSS

0.023

Percentile

89.9%

JSON

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16, 7.1 before 7.1(2)71, 7.2 before 7.2(4)7, 8.0 before 8.0(3)20, and 8.1 before 8.1(1)8 allow remote attackers to cause a denial of service (device reload) via unknown vectors, aka Bug IDs CSCsq07867, CSCsq57091, CSCsk60581, and CSCsq39315.

Affected configurations

Nvd

Node

ciscoadaptive_security_appliance_5500Match7.2

ciscoadaptive_security_appliance_5500Match8.0

ciscoadaptive_security_appliance_5500Match8.1

ciscopixMatch7.2

ciscopixMatch8.0

ciscopixMatch8.1

VendorProductVersionCPE
ciscoadaptive_security_appliance_55007.2cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_55008.0cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_55008.1cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*
ciscopix7.2cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*
ciscopix8.0cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*
ciscopix8.1cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	adaptive_security_appliance_5500	7.2	cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:::::::*
cisco	adaptive_security_appliance_5500	8.0	cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:::::::*
cisco	adaptive_security_appliance_5500	8.1	cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:::::::*
cisco	pix	7.2	cpe:2.3:h:cisco:pix:7.2:::::::*
cisco	pix	8.0	cpe:2.3:h:cisco:pix:8.0:::::::*
cisco	pix	8.1	cpe:2.3:h:cisco:pix:8.1:::::::*

References

secunia.com/advisories/31730

tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa

www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml

www.securityfocus.com/bid/30998

www.securitytracker.com/id?1020808

www.securitytracker.com/id?1020809

exchange.xforce.ibmcloud.com/vulnerabilities/44866

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

Low

EPSS

0.023

Percentile

89.9%

JSON

Related for CVE-2008-2732