CVE-2008-2060

Cisco Intrusion Prevention System 5.x < 5.1(8)E2 and 6.x < 6.0(5)E2 - Denial of Service via Jumbo Ethernet Frames

Title source: llm

Description

Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service (panic), and possibly bypass intended restrictions on network traffic, via a "specific series of jumbo Ethernet frames."

References (6)

Core 6

Core References

Patch vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a00809b3842.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020326

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/29791

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1872/references

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30767

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43166

Scores

EPSS 0.0171

EPSS Percentile 75.0%

Details

CWE

CWE-16

Status published

Products (2)

cisco/intrusion_prevention_system 5.1

cisco/intrusion_prevention_system 6.0

Published Jun 18, 2008

Tracked Since Feb 18, 2026