CVE-2008-2735

2008-09-0416:41:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

asa

5500

http server

denial of service

vulnerability

ssl

vpn

bug id

cscsq19369

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.8%

JSON

The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8.1 before 8.1(1)5, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service (device reload) via a URI in a crafted SSL or HTTP packet, aka Bug ID CSCsq19369.

Affected configurations

NVD

Node

ciscoadaptive_security_appliance_5500Match8.0

ciscoadaptive_security_appliance_5500Match8.1

CPENameOperatorVersion
cisco:adaptive_security_appliance_5500cisco adaptive security appliance 5500eq8.0
cisco:adaptive_security_appliance_5500cisco adaptive security appliance 5500eq8.1

CPE	Name	Operator	Version
cisco:adaptive_security_appliance_5500	cisco adaptive security appliance 5500	eq	8.0
cisco:adaptive_security_appliance_5500	cisco adaptive security appliance 5500	eq	8.1