CVE-2008-2057
published 2008-06-04CVE-2008-2057: The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before…
PriorityP423medium5.4CVSS 2.0
AVNACHAuNCNINAC
EPSS
2.90%
85.5th percentile
The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | pix_and_cisco_asa | — | — |
| cisco | pix_security_appliance | — | — |
| cisco | pix_security_appliance | — | — |
CVSS provenance
nvdv2.05.4MEDIUMAV:N/AC:H/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gx6q-7vqv-xvp8: The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7
ghsa_unreviewed·2022-05-01
CVE-2008-2057 [MEDIUM] GHSA-gx6q-7vqv-xvp8: The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7
The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet.
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco·2008-06-04·CVSS 7.8
CVE-2008-2055 [HIGH] CWE-399 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances. This security advisory
outlines details of these vulnerabilities:
Crafted TCP ACK Packet Vulnerability
Crafted TLS Packet Vulnerability
Instant Messenger Inspection Vulnerability
Vulnerability Scan Denial of Service
Control-plane Access Control List Vulnerability
The first four vulnerabilities may lead to a denial of service (DoS)
condition and the fifth vulnerability may allow an attacker to bypass
control-plane access control lists (ACL).
Note: These vulnerabilities are independent of each other. A device may be
affected by one vulnerability and not affected by another.
Cisco has released software updat
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2057 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2057: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-399, CWE-399
Bug IDs: CSCsm84110, CSCsm26841, CSCso22981, CSCsj60659, CSCsm67466
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/30552http://securitytracker.com/id?1020180http://securitytracker.com/id?1020181http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtmlhttp://www.vupen.com/english/advisories/2008/1750/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42837http://secunia.com/advisories/30552http://securitytracker.com/id?1020180http://securitytracker.com/id?1020181http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtmlhttp://www.vupen.com/english/advisories/2008/1750/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42837
2008-06-04
Published