CVE-2008-3812
6.7 Medium
AI Score
Confidence
High
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.013 Low
EPSS
Percentile
86.1%
Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed HTTP transit packet.
References
secunia.com/advisories/31990
tools.cisco.com/security/center/viewAlert.x?alertId=16661
www.cisco.com/en/US/products/products_security_advisory09186a0080a01545.shtml
www.securityfocus.com/bid/31354
www.securitytracker.com/id?1020929
www.vupen.com/english/advisories/2008/2670
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5302
Social References
More
Related
6.7 Medium
AI Score
Confidence
High
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.013 Low
EPSS
Percentile
86.1%