CVE-2008-3812
First published: Fri Sep 26 2008(Updated: )
Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed HTTP transit packet.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Puppet Cisco IOS | =12.4t | |
| Puppet Cisco IOS | =12.4xe | |
| Puppet Cisco IOS | =12.4xj | |
| Puppet Cisco IOS | =12.4xk | |
| Puppet Cisco IOS | =12.4xv | |
| Puppet Cisco IOS | =12.4xw |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://tools.cisco.com/security/center/viewAlert.x?alertId=16661
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01545.shtml
- http://secunia.com/advisories/31990
- http://www.securityfocus.com/bid/31354
- http://www.vupen.com/english/advisories/2008/2670
- http://www.securitytracker.com/id?1020929
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5302
Frequently Asked Questions
What is the severity of CVE-2008-3812?
CVE-2008-3812 is considered to have a high severity due to its potential to cause denial of service through device reload.
How do I fix CVE-2008-3812?
To mitigate CVE-2008-3812, it is recommended to disable HTTP Deep Packet Inspection in the Cisco IOS firewall settings.
What vulnerabilities does CVE-2008-3812 affect?
CVE-2008-3812 affects Cisco IOS versions 12.4t, 12.4xj, 12.4xv, 12.4xw, 12.4xk, and 12.4xe.
Who is impacted by CVE-2008-3812?
Network administrators using the specified versions of Cisco IOS with HTTP Deep Packet Inspection enabled are impacted by CVE-2008-3812.
Is CVE-2008-3812 being actively exploited?
As of the last reports, CVE-2008-3812 was known to be a vulnerability that could be exploited remotely, presenting a security risk that should be addressed.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/cisco
- canonical/cisco ios
- version/cisco ios/12.4t
- version/cisco ios/12.4xe
- version/cisco ios/12.4xj
- version/cisco ios/12.4xk
- version/cisco ios/12.4xv
- version/cisco ios/12.4xw