First published: Wed Jun 04 2008(Updated: )
The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet.
Credit: ykramarz@cisco.com ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco PIX 506E | =7.2 | |
Cisco PIX 506E | =8.0 | |
Cisco Adaptive Security Appliance Software | =7.2.2 | |
Cisco Adaptive Security Appliance Software | =8.0 | |
Cisco Adaptive Security Appliance Software | =8.0 | |
Cisco Adaptive Security Appliance Software | =7.2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-2057 is classified as a high-severity vulnerability due to its potential to cause a denial of service.
To fix CVE-2008-2057, upgrade Cisco Adaptive Security Appliance and Cisco PIX Software to the latest versions that contain the security patch.
CVE-2008-2057 affects users of Cisco Adaptive Security Appliance and Cisco PIX security appliance versions 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2.
CVE-2008-2057 is associated with remote denial of service attacks via specially crafted packets.
There are no known workarounds for CVE-2008-2057, so applying the recommended software updates is essential.