CVE-2008-0028
published 2008-01-23CVE-2008-0028: Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the…
PriorityP427high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
1.98%
78.3th percentile
Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL) decrement feature is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted IP packet.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | < 7.2\(3\)6 | 7.2\(3\)6 |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | pix_and_asa_time-to-live | — | — |
| cisco | pix_firewall_software | < 7.2\(3\)6 | 7.2\(3\)6 |
| cisco | pix_firewall_software | — | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
vendor_cisco7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco PIX and ASA Time-to-Live Vulnerability
vendor_cisco·2008-01-23·CVSS 7.1
CVE-2008-0028 [HIGH] CWE-399 Cisco PIX and ASA Time-to-Live Vulnerability
Cisco PIX and ASA Time-to-Live Vulnerability
A crafted IP packet vulnerability exists in the Cisco PIX 500 Series
Security Appliance (PIX) and the Cisco 5500 Series Adaptive Security Appliance
(ASA) that may result in a reload of the device. This vulnerability is
triggered during processing of a crafted IP packet when the Time-to-Live (TTL)
decrement feature is enabled.
Common Vulnerabilities and Exposures (CVE) identifier CVE-2008-0028 has
been assigned to this vulnerability.
Cisco has released software updates that address this vulnerability. A workaround that mitigates this vulnerability is available.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080123-asa.
Cisco
Cisco PIX and ASA Time-to-Live Vulnerability
vendor_cisco
CVE-2008-0028 Cisco PIX and ASA Time-to-Live Vulnerability
CVE-2008-0028: Cisco PIX and ASA Time-to-Live Vulnerability
A crafted IP packet vulnerability exists in the Cisco PIX 500 Series Security Appliance (PIX) and the Cisco 5500 Series Adaptive Security Appliance (ASA) that may result in a reload of the device. This vulnerability is triggered during processing of a crafted IP packet when the Time-to-Live (TTL) decrement feature is enabled. Common Vulnerabilities and Exposures (CVE) identifier CVE-2008-0028 has been assigned to this vulnerability. Cisco has released software updates that address this vulnerability. A workaround that mitigates this vulnerability is available. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080123-asa .
CWE: CWE-399, CWE-399
Bug IDs: CSCsk48199, C
GHSA
GHSA-cj9p-7339-g76g: Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7
ghsa_unreviewed·2022-05-01
CVE-2008-0028 [HIGH] GHSA-cj9p-7339-g76g: Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7
Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL) decrement feature is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted IP packet.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/28625http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtmlhttp://www.securityfocus.com/bid/27418http://www.securitytracker.com/id?1019262http://www.securitytracker.com/id?1019263http://www.vupen.com/english/advisories/2008/0259https://exchange.xforce.ibmcloud.com/vulnerabilities/39862http://secunia.com/advisories/28625http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtmlhttp://www.securityfocus.com/bid/27418http://www.securitytracker.com/id?1019262http://www.securitytracker.com/id?1019263http://www.vupen.com/english/advisories/2008/0259https://exchange.xforce.ibmcloud.com/vulnerabilities/39862
2008-01-23
Published