CVE-2008-2058: High severity cisco adaptive security appliance software vulnerability

Published Jun 4, 2008

Updated

Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(3)2 and 8.0.x before 8.0(2)17 allows remote attackers to cause a denial of service (device reload) via a port scan against TCP port 443 on the device.

Affected Software

6 affected components

Cisco Adaptive Security Appliance Software=8.0

Cisco PIX security appliance=7.2

Cisco Adaptive Security Appliance Software=7.2.2

Cisco PIX security appliance=8.0

Cisco Adaptive Security Appliance Software=7.2.2

Cisco Adaptive Security Appliance Software=8.0

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml

Event History

Jun 4, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2058?

CVE-2008-2058 is classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2008-2058?

To mitigate CVE-2008-2058, upgrade the Cisco ASA or PIX software to versions 7.2(3)2 or 8.0(2)17 or later.

What devices are affected by CVE-2008-2058?

CVE-2008-2058 affects Cisco Adaptive Security Appliance and Cisco PIX security appliances running specific versions of their software.

What type of attack does CVE-2008-2058 expose devices to?

CVE-2008-2058 allows remote attackers to execute a denial of service attack that can lead to device reload.

Is there a workaround for CVE-2008-2058?

The best course of action for CVE-2008-2058 is to apply the recommended software updates, as no effective workaround is available.