CVE-2008-2732
published 2008-09-04CVE-2008-2732: Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16…
PriorityP339high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
3.42%
87.6th percentile
Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16, 7.1 before 7.1(2)71, 7.2 before 7.2(4)7, 8.0 before 8.0(3)20, and 8.1 before 8.1(1)8 allow remote attackers to cause a denial of service (device reload) via unknown vectors, aka Bug IDs CSCsq07867, CSCsq57091, CSCsk60581, and CSCsq39315.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | adaptive_security_appliance_5500 | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix_and_cisco_asa | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco·2008-09-03·CVSS 7.8
CVE-2008-2732 [HIGH] CWE-200 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances that may result in a
reload of the device or disclosure of confidential information. This security
advisory outlines details of the following vulnerabilities:
Erroneous SIP Processing Vulnerabilities
IPSec Client Authentication Processing Vulnerability
SSL VPN Memory Leak Vulnerability
URI Processing Error Vulnerability in SSL VPNs
Potential Information Disclosure in Clientless VPNs
Note: These vulnerabilities are independent of each other. A device may be
affected by one vulnerability and not affected by another. Cisco has released software updates that address these vulnerabilities. Wor
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-2732 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-2732: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances that may result in a reload of the device or disclosure of confidential information. This security advisory outlines
CWE: CWE-200, CWE-399, CWE-200, CWE-399
Bug IDs: CSCsq07867, CSCsq57091, CSCsk60581, CSCsq39315, CSCso69942
GHSA
GHSA-cggf-9qjh-g2mc: Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7
ghsa_unreviewed·2022-05-01
CVE-2008-2732 [HIGH] GHSA-cggf-9qjh-g2mc: Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7
Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16, 7.1 before 7.1(2)71, 7.2 before 7.2(4)7, 8.0 before 8.0(3)20, and 8.1 before 8.1(1)8 allow remote attackers to cause a denial of service (device reload) via unknown vectors, aka Bug IDs CSCsq07867, CSCsq57091, CSCsk60581, and CSCsq39315.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/31730http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asahttp://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtmlhttp://www.securityfocus.com/bid/30998http://www.securitytracker.com/id?1020808http://www.securitytracker.com/id?1020809https://exchange.xforce.ibmcloud.com/vulnerabilities/44866http://secunia.com/advisories/31730http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asahttp://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtmlhttp://www.securityfocus.com/bid/30998http://www.securitytracker.com/id?1020808http://www.securitytracker.com/id?1020809https://exchange.xforce.ibmcloud.com/vulnerabilities/44866
2008-09-04
Published