CVE-2008-3815
published 2008-10-23CVE-2008-3815: Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2…
PriorityP431medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
1.55%
72.1th percentile
Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix | — | — |
| cisco | pix_and_cisco_asa | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco·2008-10-22·CVSS 7.8
CVE-2008-3815 [HIGH] CWE-264 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive
Security Appliances and Cisco PIX Security Appliances. This security advisory
outlines details of these vulnerabilities:
Windows NT Domain Authentication Bypass Vulnerability
IPv6 Denial of Service Vulnerability
Crypto Accelerator Memory Leak Vulnerability
Note: These vulnerabilities are independent of each other. A device may
be affected by one vulnerability and not affected by another.
Cisco has released software updates that address these vulnerabilities. Workarounds that mitigate some of these vulnerabilities are
available.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20081022-asa.
Cisco
Multiple Vulnerabilities in Cisco PIX and Cisco ASA
vendor_cisco
CVE-2008-3815 Multiple Vulnerabilities in Cisco PIX and Cisco ASA
CVE-2008-3815: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines
CWE: CWE-264, CWE-399, CWE-264, CWE-399
Bug IDs: CSCsu65735, CSCsu11575, CSCsj25896
GHSA
GHSA-9qxp-4454-64h6: Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7
ghsa_unreviewed·2022-05-02
CVE-2008-3815 [MEDIUM] CWE-287 GHSA-9qxp-4454-64h6: Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7
Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/32360http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtmlhttp://www.securityfocus.com/bid/31864http://www.securitytracker.com/id?1021089http://www.securitytracker.com/id?1021090http://www.vupen.com/english/advisories/2008/2899https://exchange.xforce.ibmcloud.com/vulnerabilities/46024https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983http://secunia.com/advisories/32360http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtmlhttp://www.securityfocus.com/bid/31864http://www.securitytracker.com/id?1021089http://www.securitytracker.com/id?1021090http://www.vupen.com/english/advisories/2008/2899https://exchange.xforce.ibmcloud.com/vulnerabilities/46024https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983
2008-10-23
Published