high7.1
CVE-2008-2734
Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4…
Impact
Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Adaptive Security Appliance 5500 | Versions 8.0, 8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/31730
- http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa
- http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml
- http://www.securityfocus.com/bid/30998
- http://www.securitytracker.com/id?1020812
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44868
- http://secunia.com/advisories/31730
- http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa
- http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml
- http://www.securityfocus.com/bid/30998
- http://www.securitytracker.com/id?1020812
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44868