CVE-2008-2734

Published: Sep 4, 2008Modified: Apr 23, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472.

Affected (2)

Products: Cisco: Adaptive Security Appliance 5500

1 product

Adaptive Security Appliance 5500

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Adaptive Security Appliance 5500	Version 8.0
Cisco Adaptive Security Appliance 5500	Version 8.1

Related CWEs

References (12)

http://secunia.com/advisories/31730

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa

Source: psirt@cisco.com

http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml

Source: psirt@cisco.com

http://www.securityfocus.com/bid/30998

Source: psirt@cisco.com

http://www.securitytracker.com/id?1020812

Source: psirt@cisco.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/44868

Source: psirt@cisco.com

http://secunia.com/advisories/31730

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asa

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/30998

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1020812

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/44868

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.