CVE-2008-2057: Medium severity cisco pix 506e vulnerability

Published Jun 4, 2008

Updated

The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet.

Affected Software

6 affected components

Cisco PIX security appliance=7.2

Cisco PIX security appliance=8.0

Cisco Adaptive Security Appliance Software=7.2.2

Cisco Adaptive Security Appliance Software=8.0

Cisco Adaptive Security Appliance Software=7.2.2

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml

Event History

Jun 4, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2057?

CVE-2008-2057 is classified as a high-severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2008-2057?

To fix CVE-2008-2057, upgrade Cisco Adaptive Security Appliance and Cisco PIX Software to the latest versions that contain the security patch.

Who is affected by CVE-2008-2057?

CVE-2008-2057 affects users of Cisco Adaptive Security Appliance and Cisco PIX security appliance versions 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2.

What type of attack is associated with CVE-2008-2057?

CVE-2008-2057 is associated with remote denial of service attacks via specially crafted packets.

Is there any workaround for CVE-2008-2057?

There are no known workarounds for CVE-2008-2057, so applying the recommended software updates is essential.