CVE-2008-2059
published 2008-06-04CVE-2008-2059: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 allows remote attackers to bypass control-plane ACLs for the…
PriorityP339high7.8CVSS 2.0
AVNACLAuNCCINAN
EPSS
1.81%
76.2th percentile
Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | — | — |
| cisco | pix_and_cisco_asa | — | — |
| cisco | pix_security_appliance | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xx7c-3hw3-xfp5: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8
ghsa_unreviewed·2022-05-01
CVE-2008-2059 [HIGH] GHSA-xx7c-3hw3-xfp5: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8
Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors.
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco·2008-06-04·CVSS 7.8
CVE-2008-2055 [HIGH] CWE-399 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances. This security advisory
outlines details of these vulnerabilities:
Crafted TCP ACK Packet Vulnerability
Crafted TLS Packet Vulnerability
Instant Messenger Inspection Vulnerability
Vulnerability Scan Denial of Service
Control-plane Access Control List Vulnerability
The first four vulnerabilities may lead to a denial of service (DoS)
condition and the fifth vulnerability may allow an attacker to bypass
control-plane access control lists (ACL).
Note: These vulnerabilities are independent of each other. A device may be
affected by one vulnerability and not affected by another.
Cisco has released software updat
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2059 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2059: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-399, CWE-399
Bug IDs: CSCsm84110, CSCsm26841, CSCso22981, CSCsj60659, CSCsm67466
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/30552http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtmlhttp://www.securitytracker.com/id?1020184http://www.securitytracker.com/id?1020185http://www.vupen.com/english/advisories/2008/1750/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42841http://secunia.com/advisories/30552http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtmlhttp://www.securitytracker.com/id?1020184http://www.securitytracker.com/id?1020185http://www.vupen.com/english/advisories/2008/1750/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42841
2008-06-04
Published