CVE-2008-1159
published 2008-05-22CVE-2008-1159: Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of service (device restart) via unknown…
PriorityP427high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
2.51%
83.1th percentile
Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of service (device restart) via unknown vectors, aka Bug ID (1) CSCsk42419, (2) CSCsk60020, and (3) CSCsh51293.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios_s | — | — |
| cisco | ios_secure_shell | — | — |
| cisco | ios_t | — | — |
| cisco | ios_xr | — | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
vendor_cisco7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS Secure Shell Denial of Service Vulnerabilities
vendor_cisco·2008-05-21·CVSS 7.1
CVE-2008-1159 [HIGH] CWE-399 Cisco IOS Secure Shell Denial of Service Vulnerabilities
Cisco IOS Secure Shell Denial of Service Vulnerabilities
The Secure Shell server (SSH) implementation in Cisco IOS contains
multiple vulnerabilities that allow unauthenticated users the ability to
generate a spurious memory access error or, in certain cases, reload the
device.
The IOS SSH server is an optional service that is disabled by default,
but its use is highly recommended as a security best practice for management of
Cisco IOS devices. SSH can be configured as part of the AutoSecure feature in
the initial configuration of IOS devices, AutoSecure run after initial
configuration, or manually. SSH is enabled any time RSA keys are generated such
as when a http secure-server or trust points for digital certificates are
configured. Devices that are not configured to accept SSH connect
Cisco
Cisco IOS Secure Shell Denial of Service Vulnerabilities
vendor_cisco
CVE-2008-1159 Cisco IOS Secure Shell Denial of Service Vulnerabilities
CVE-2008-1159: Cisco IOS Secure Shell Denial of Service Vulnerabilities
The Secure Shell server (SSH) implementation in Cisco IOS contains multiple vulnerabilities that allow unauthenticated users the ability to generate a spurious memory access error or, in certain cases, reload the device. The IOS SSH server is an optional service that is disabled by default, but its use is highly recommended as a security best practice for management of Cisco IOS devices. SSH can be configured as part of the AutoSecure feature in the initial configuration of IOS devices, AutoSecure run after initial configuration, or manually. SSH is enabled any time RSA keys are generated such as when a http secure-server or trust points for digital certificates are configured. Devices that are not configured to accept
GHSA
GHSA-g9x2-362f-ghjp: Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12
ghsa_unreviewed·2022-05-01
CVE-2008-1159 [HIGH] GHSA-g9x2-362f-ghjp: Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12
Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of service (device restart) via unknown vectors, aka Bug ID (1) CSCsk42419, (2) CSCsk60020, and (3) CSCsh51293.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/30322http://securitytracker.com/id?1020073http://www.cisco.com/en/US/products/products_security_advisory09186a008099567f.shtmlhttp://www.securityfocus.com/bid/29314http://www.vupen.com/english/advisories/2008/1605/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42563https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5486http://secunia.com/advisories/30322http://securitytracker.com/id?1020073http://www.cisco.com/en/US/products/products_security_advisory09186a008099567f.shtmlhttp://www.securityfocus.com/bid/29314http://www.vupen.com/english/advisories/2008/1605/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42563https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5486
2008-05-22
Published