QwikSec

Security Database

CVE

CWE

Training

CVE-2008-2734

Published: Sep 4, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_SECTRACK

cisco-asa-sslvpn-dos(44868)

vdb-entry

x_refsource_XF

20080903 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

vendor-advisory

x_refsource_CISCO

20080903 Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of the Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

vendor-advisory

x_refsource_CISCO

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.