CVE-2008-2055: Input Validation

Published Jun 4, 2008

Updated

Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface.

Affected Software

9 affected components

Cisco PIX security appliance=7.1

Cisco PIX security appliance=7.2

Cisco PIX security appliance=8.0

Cisco Adaptive Security Appliance Software=7.1

Cisco Adaptive Security Appliance Software=7.2.2

Cisco Adaptive Security Appliance Software=8.0

Cisco Adaptive Security Appliance Software=7.1

Cisco Adaptive Security Appliance Software=7.2.2

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml

Event History

Jun 4, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2055?

CVE-2008-2055 has a CVSS score that typically indicates a medium to high severity level due to its ability to cause denial of service.

How do I fix CVE-2008-2055?

To fix CVE-2008-2055, upgrade Cisco Adaptive Security Appliance or Cisco PIX software to appropriate versions that address the vulnerability.

What devices are affected by CVE-2008-2055?

CVE-2008-2055 affects Cisco Adaptive Security Appliances and Cisco PIX security appliances running certain versions before specified patches.

Can CVE-2008-2055 be exploited remotely?

Yes, CVE-2008-2055 can be exploited remotely through crafted TCP ACK packets aimed at the device interface.

What are the versions of Cisco software impacted by CVE-2008-2055?

The impacted versions of Cisco software include 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10.