Lucene search

[email protected]CVE-2009-0628

HistoryMar 27, 2009 - 4:30 p.m.

CVE-2009-0628

2009-03-2716:30:01

CWE-200

[email protected]

web.nvd.nist.gov

cve-2009-0628

cisco

ios

sslvpn

memory leak

dos

nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

6.6 Medium

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.2%

JSON

Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak.

Affected configurations

NVD

Node

ciscocisco_iosMatch12.3

ciscocisco_iosMatch12.3b

ciscocisco_iosMatch12.3bc

ciscocisco_iosMatch12.3bw

ciscocisco_iosMatch12.3eu

ciscocisco_iosMatch12.3ja

ciscocisco_iosMatch12.3jea

ciscocisco_iosMatch12.3jeb

ciscocisco_iosMatch12.3jec

ciscocisco_iosMatch12.3jk

ciscocisco_iosMatch12.3jl

ciscocisco_iosMatch12.3jx

ciscocisco_iosMatch12.3t

ciscocisco_iosMatch12.3tpc

ciscocisco_iosMatch12.3va

ciscocisco_iosMatch12.3xa

ciscocisco_iosMatch12.3xb

ciscocisco_iosMatch12.3xc

ciscocisco_iosMatch12.3xd

ciscocisco_iosMatch12.3xe

ciscocisco_iosMatch12.3xf

ciscocisco_iosMatch12.3xg

ciscocisco_iosMatch12.3xh

ciscocisco_iosMatch12.3xi

ciscocisco_iosMatch12.3xj

ciscocisco_iosMatch12.3xk

ciscocisco_iosMatch12.3xq

ciscocisco_iosMatch12.3xr

ciscocisco_iosMatch12.3xs

ciscocisco_iosMatch12.3xu

ciscocisco_iosMatch12.3xw

ciscocisco_iosMatch12.3xy

ciscocisco_iosMatch12.3ya

ciscocisco_iosMatch12.3yd

ciscocisco_iosMatch12.3yf

ciscocisco_iosMatch12.3yg

ciscocisco_iosMatch12.3yh

ciscocisco_iosMatch12.3yi

ciscocisco_iosMatch12.3yj

ciscocisco_iosMatch12.3yk

ciscocisco_iosMatch12.3ym

ciscocisco_iosMatch12.3yq

ciscocisco_iosMatch12.3ys

ciscocisco_iosMatch12.3yt

ciscocisco_iosMatch12.3yu

ciscocisco_iosMatch12.3yx

ciscocisco_iosMatch12.3yz

ciscocisco_iosMatch12.4

ciscocisco_iosMatch12.4ja

ciscocisco_iosMatch12.4jk

ciscocisco_iosMatch12.4jma

ciscocisco_iosMatch12.4jmb

ciscocisco_iosMatch12.4jmc

ciscocisco_iosMatch12.4jx

ciscocisco_iosMatch12.4md

ciscocisco_iosMatch12.4mr

ciscocisco_iosMatch12.4sw

ciscocisco_iosMatch12.4t

ciscocisco_iosMatch12.4xa

ciscocisco_iosMatch12.4xb

ciscocisco_iosMatch12.4xc

ciscocisco_iosMatch12.4xd

ciscocisco_iosMatch12.4xe

ciscocisco_iosMatch12.4xf

ciscocisco_iosMatch12.4xg

ciscocisco_iosMatch12.4xj

ciscocisco_iosMatch12.4xk

CPENameOperatorVersion
cisco:cisco_ioscisco cisco ioseq12.3
cisco:cisco_ioscisco cisco ioseq12.4

CPE	Name	Operator	Version
cisco:cisco_ios	cisco cisco ios	eq	12.3
cisco:cisco_ios	cisco cisco ios	eq	12.4

References

secunia.com/advisories/34438

securitytracker.com/id?1021896

www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml

www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml

www.securityfocus.com/bid/34239

www.vupen.com/english/advisories/2009/0851

exchange.xforce.ibmcloud.com/vulnerabilities/49427

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12092

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

6.6 Medium

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.2%

JSON

Related for CVE-2009-0628

prion1 cvelist1 nvd1 seebug1 nessus1 securityvulns2 openvas2