QwikSec

Security Database

CVE

CWE

Training

CVE-2008-2733

Published: Sep 4, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service (device reload) via a crafted authentication attempt, aka Bug ID CSCso69942.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20080903 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

vendor-advisory

x_refsource_CISCO

cisco-pix-asa-ipsecclientauth-dos(44867)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_SECTRACK

20080903 Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of the Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

vendor-advisory

x_refsource_CISCO

vdb-entry

x_refsource_SECTRACK

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

CVE-2008-2733 - Security Vulnerability | QwikSec