deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-2524
Published: 2008-06-03
Description: BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a cookie.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/30165; http://www.davidsopas.com/soapbox/blogphp.txt; http://www.securityfocus.com/bid/29133
CVE: CVE-2008-2525
Published: 2008-06-03
Description: Cross-site scripting (XSS) vulnerability in the Event Database (aka rlmp_eventdb) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30218; http://typo3.org/teams/security/security-bulletins/typo3-20080513-3/; http://www.securityfocus.com/bid/29180
CVE: CVE-2008-2526
Published: 2008-06-03
Description: Cross-site scripting (XSS) vulnerability in the WT Gallery (aka wt_gallery) extension 2.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30217; http://typo3.org/teams/security/security-bulletins/typo3-20080513-1/; http://www.securityfocus.com/bid/29182
CVE: CVE-2008-2527
Published: 2008-06-03
Description: Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the language parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30205; http://www.majorsecurity.de/index_2.php?major_rls=major_rls52; http://www.securityfocus.com/archive/1/491982/100/0/threaded
CVE: CVE-2008-2528
Published: 2008-06-03
Description: Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain "access to network resources" via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/30175; http://support.citrix.com/article/CTX116930; http://www.securityfocus.com/bid/29174
CVE: CVE-2008-2529
Published: 2008-06-03
Description: SQL injection vulnerability in read.php in Advanced Links Management (ALM) 1.5.2 allows remote attackers to execute arbitrary SQL commands via the catId parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/29137; https://exchange.xforce.ibmcloud.com/vulnerabilities/42320; https://www.exploit-db.com/exploits/5581
CVE: CVE-2008-2530
Published: 2008-06-03
Description: Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the (1) nr parameter to (a) frontend/news.php, the (2) id parameter to (b) events3.php and (c) videos2.php in frontend/, the (3) y parameter to (d) frontend/events2.php, and the (4) ser parameter to (e) frontend/fotos2.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/29145; https://exchange.xforce.ibmcloud.com/vulnerabilities/42325; https://www.exploit-db.com/exploits/5588
CVE: CVE-2008-2531
Published: 2008-06-03
Description: Cross-site scripting (XSS) vulnerability in the search script in Build A Niche Store (BANS) 3.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://holisticinfosec.org/content/view/64/45/; http://secunia.com/advisories/30153; http://www.securityfocus.com/bid/29187
CVE: CVE-2008-2532
Published: 2008-06-03
Description: SQL injection vulnerability in forum/topic_detail.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/29173; https://exchange.xforce.ibmcloud.com/vulnerabilities/42382; https://www.exploit-db.com/exploits/5602
CVE: CVE-2008-2533
Published: 2008-06-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ltarget parameter to (a) admin/admin_frame.php and the (2) conf parameter to (b) gbuch.admin.php, (c) links.admin.php, (d) menue.admin.php, (e) news.admin.php, and (f) todo.admin.php in admin/module/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/29130; https://exchange.xforce.ibmcloud.com/vulnerabilities/42314; https://www.exploit-db.com/exploits/5578
CVE: CVE-2008-2534
Published: 2008-06-03
Description: Directory traversal vulnerability in admin/admin_frame.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ltarget parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/42315; https://www.exploit-db.com/exploits/5578; https://exchange.xforce.ibmcloud.com/vulnerabilities/42315
CVE: CVE-2008-2535
Published: 2008-06-03
Description: Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to (1) gbuch.admin.php, (2) links.admin.php, (3) menue.admin.php, (4) news.admin.php, and (5) todo.admin.php in admin/module/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/42316; https://www.exploit-db.com/exploits/5578; https://exchange.xforce.ibmcloud.com/vulnerabilities/42316
CVE: CVE-2008-2536
Published: 2008-06-03
Description: SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30207; http://www.securityfocus.com/bid/29172; https://exchange.xforce.ibmcloud.com/vulnerabilities/42405
CVE: CVE-2008-2537
Published: 2008-06-03
Description: SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/29128; https://exchange.xforce.ibmcloud.com/vulnerabilities/42312; https://www.exploit-db.com/exploits/5577
CVE: CVE-2008-2538
Published: 2008-06-03
Description: Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93, allows local users to insert cron jobs into the crontab files of arbitrary users via unspecified vectors.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://secunia.com/advisories/30482; http://secunia.com/advisories/30542; http://securitytracker.com/id?1020151
CVE: CVE-2008-2539
Published: 2008-06-03
Description: The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is used, might allow local users to read data from arbitrary deleted files, or corrupt files in global filesystems, via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/30483; http://sunsolve.sun.com/search/document.do?assetkey=1-26-201341-1; http://www.securityfocus.com/bid/29458
CVE: CVE-2008-2540
Published: 2008-06-03
Description: Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the (1) Desktop directory on Windows or (2) Downloads directory on Mac OS X, and subsequently allows remote attackers to execute arbitrary code on Windows by leveraging an untrusted search path vulnerability in (a) Internet Explorer 7 on Windows XP or (b) the SearchPath function in Windows XP, Vista, and Server 2003 and 2008, aka a "Carpet Bomb" and a "Blended Threat Elevation of Privilege Vulnerability," a different issue than CVE-2008-1032. NOTE: Apple considers this a vulnerability only because the Microsoft products can load application libraries from the desktop and, as of 20080619, has not covered the issue in an advisory for Mac OS X.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://aviv.raffon.net/2008/05/31/SafariPwnsInternetExplorer.aspx; http://blogs.zdnet.com/security/?p=1230; http://lists.apple.com/archives/security-announce/2008//Jun/msg00001.html
CVE: CVE-2008-1035
Published: 2008-06-03
Description: Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug.  NOTE: CVE-2008-2007 was originally used for this issue, but this is the appropriate identifier.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2008//May/msg00001.html; http://secunia.com/advisories/30430; http://www.coresecurity.com/?action=item&id=2219
CVE: CVE-2008-1661
Published: 2008-06-04
Description: Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6713&w=2; http://secunia.com/advisories/30502; http://www.securitytracker.com/id?1020157
CVE: CVE-2008-1947
Published: 2008-06-04
Description: Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
CVE: CVE-2008-2119
Published: 2008-06-04
Description: Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://bugs.digium.com/view.php?id=12607; http://downloads.digium.com/pub/security/AST-2008-008.html; http://secunia.com/advisories/30517
CVE: CVE-2008-2547
Published: 2008-06-04
Description: Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attackers to execute arbitrary code via a long GUID value for the /x (aka /uninstall) option.  NOTE: this issue might cross privilege boundaries if msiexec.exe is reachable via components such as ActiveX controls, and might additionally require a separate vulnerability in the control.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.aushack.com/200806-msiexec.txt; http://www.securityfocus.com/archive/1/492961/100/0/threaded; http://www.securityfocus.com/archive/1/492986/100/0/threaded
CVE: CVE-2008-2548
Published: 2008-06-04
Description: Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/30409; http://www.securityfocus.com/archive/1/492668/100/0/threaded; http://www.securitytracker.com/id?1020117
CVE: CVE-2008-2549
Published: 2008-06-04
Description: Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf.
CVSS Score: 4.3 (MEDIUM)
References: http://download.oracle.com/sunalerts/1019937.1.html; http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html; http://secunia.com/advisories/32700
CVE: CVE-2007-5604
Published: 2008-06-04
Description: Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5605, CVE-2007-5606, and CVE-2007-5607.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/30516; http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf; http://www.kb.cert.org/vuls/id/754403
CVE: CVE-2007-5605
Published: 2008-06-04
Description: Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and CVE-2007-5607.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/30516; http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf; http://www.kb.cert.org/vuls/id/558163
CVE: CVE-2007-5606
Published: 2008-06-04
Description: Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/30516; http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf; http://www.kb.cert.org/vuls/id/221123
CVE: CVE-2007-5607
Published: 2008-06-04
Description: Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5606.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/30516; http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf; http://www.kb.cert.org/vuls/id/526131
CVE: CVE-2007-5608
Published: 2008-06-04
Description: The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client machine via a URL in the first argument and a destination filename in the second argument, a different vulnerability than CVE-2008-0952 and CVE-2008-0953.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/30516; http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf; http://www.kb.cert.org/vuls/id/949587
CVE: CVE-2007-5610
Published: 2008-06-04
Description: The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to delete an arbitrary file via a full pathname in the argument.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/30516; http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf; http://www.kb.cert.org/vuls/id/857539
CVE: CVE-2008-0952
Published: 2008-06-04
Description: The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/30516; http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf; http://www.kb.cert.org/vuls/id/190939
CVE: CVE-2008-0953
Published: 2008-06-04
Description: The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/30516; http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf; http://www.kb.cert.org/vuls/id/998779
CVE: CVE-2008-1108
Published: 2008-06-04
Description: Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html; http://secunia.com/advisories/30298; http://secunia.com/advisories/30527
CVE: CVE-2008-1109
Published: 2008-06-04
Description: Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html; http://secunia.com/advisories/30298; http://secunia.com/advisories/30527
CVE: CVE-2008-2401
Published: 2008-06-04
Description: The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain file that is included by multiple unspecified ASP applications.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=705; http://secunia.com/advisories/30523; http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
CVE: CVE-2008-2402
Published: 2008-06-04
Description: The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=706; http://secunia.com/advisories/30523; http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
CVE: CVE-2008-2403
Published: 2008-06-04
Description: Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=707; http://secunia.com/advisories/30523; http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
CVE: CVE-2008-2404
Published: 2008-06-04
Description: Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary code via an unspecified string field.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708; http://secunia.com/advisories/30523; http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
CVE: CVE-2008-2405
Published: 2008-06-04
Description: Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=709; http://secunia.com/advisories/30523; http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
CVE: CVE-2008-2406
Published: 2008-06-04
Description: The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=710; http://secunia.com/advisories/30523; http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1
CVE: CVE-2008-2541
Published: 2008-06-04
Description: Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST command; (2) the PASV command; and (3) directories, files, and links in a LIST command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://dvlabs.tippingpoint.com/advisory/TPTI-08-05; http://secunia.com/advisories/30518; http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36408
CVE: CVE-2008-2550
Published: 2008-06-04
Description: Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/30526; http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951; http://www-1.ibm.com/support/docview.wss?uid=swg1PK61315
CVE: CVE-2008-1770
Published: 2008-06-04
Description: CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062672.html; http://secunia.com/advisories/30537; http://www.securityfocus.com/archive/1/493077/100/0/threaded
CVE: CVE-2008-2055
Published: 2008-06-04
Description: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/30552; http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml; http://www.securitytracker.com/id?1020176
CVE: CVE-2008-2056
Published: 2008-06-04
Description: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 and 8.1.x before 8.1(1)1 allows remote attackers to cause a denial of service (device reload) via a crafted Transport Layer Security (TLS) packet to the device interface.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/30552; http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml; http://www.securitytracker.com/id?1020178
CVE: CVE-2008-2057
Published: 2008-06-04
Description: The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet.
CVSS Score: 5.4 (MEDIUM)
References: http://secunia.com/advisories/30552; http://securitytracker.com/id?1020180; http://securitytracker.com/id?1020181
CVE: CVE-2008-2058
Published: 2008-06-04
Description: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(3)2 and 8.0.x before 8.0(2)17 allows remote attackers to cause a denial of service (device reload) via a port scan against TCP port 443 on the device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/30552; http://securitytracker.com/id?1020182; http://securitytracker.com/id?1020183