CVE-2008-2733

Cisco PIX/ASA 7.2-7.2(4)2, 8.0-8.0(3)14, 8.1-8.1(1)4 DoS via IPSec Client Auth

Title source: llm

Description

Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service (device reload) via a crafted authentication attempt, aka Bug ID CSCso69942.

References (7)

Core 7

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/44867

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020811

Various Sources vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020810

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31730

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/30998

Scores

EPSS 0.0319

EPSS Percentile 86.8%

Details

Status published

Products (6)

cisco/adaptive_security_appliance_5500 7.2

cisco/adaptive_security_appliance_5500 8.0

cisco/adaptive_security_appliance_5500 8.1

cisco/pix 7.2

cisco/pix 8.0

cisco/pix 8.1

Published Sep 04, 2008

Tracked Since Feb 18, 2026