CVE-2008-2055
published 2008-06-04CVE-2008-2055: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10 allows remote…
PriorityP434high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.26%
81.0th percentile
Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | pix_and_cisco_asa | — | — |
| cisco | pix_security_appliance | — | — |
| cisco | pix_security_appliance | — | — |
| cisco | pix_security_appliance | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco·2008-06-04·CVSS 7.8
CVE-2008-2055 [HIGH] CWE-399 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances. This security advisory
outlines details of these vulnerabilities:
Crafted TCP ACK Packet Vulnerability
Crafted TLS Packet Vulnerability
Instant Messenger Inspection Vulnerability
Vulnerability Scan Denial of Service
Control-plane Access Control List Vulnerability
The first four vulnerabilities may lead to a denial of service (DoS)
condition and the fifth vulnerability may allow an attacker to bypass
control-plane access control lists (ACL).
Note: These vulnerabilities are independent of each other. A device may be
affected by one vulnerability and not affected by another.
Cisco has released software updat
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2055 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2055: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-399, CWE-399
Bug IDs: CSCsm84110, CSCsm26841, CSCso22981, CSCsj60659, CSCsm67466
GHSA
GHSA-pm7g-rjq3-4v5h: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7
ghsa_unreviewed·2022-05-01
CVE-2008-2055 [HIGH] CWE-20 GHSA-pm7g-rjq3-4v5h: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7
Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/30552http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtmlhttp://www.securitytracker.com/id?1020176http://www.securitytracker.com/id?1020177http://www.vupen.com/english/advisories/2008/1750/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42835http://secunia.com/advisories/30552http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtmlhttp://www.securitytracker.com/id?1020176http://www.securitytracker.com/id?1020177http://www.vupen.com/english/advisories/2008/1750/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42835
2008-06-04
Published