PT-2008-2164 · Icon+1 · Icon Labs Iconfidant Ssh+1

Publicado 2008-05-22 · Atualizado 2017-08-08 · CVE-2008-0536

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Service Control Engine (SCE) versions 3.0.x through 3.0.6 Cisco Service Control Engine (SCE) versions 3.1.x through 3.0.x Icon Labs Iconfidant SSH versions prior to 2.3.8

Description The issue allows remote attackers to cause a denial of service, specifically a management interface outage, via SSH traffic during management operations. This is triggered by "illegal I/O operations".

Recommendations For Cisco Service Control Engine (SCE) versions 3.0.x through 3.0.6, update to version 3.0.7 or later. For Cisco Service Control Engine (SCE) versions 3.1.x through 3.0.x, update to version 3.1.0 or later. For Icon Labs Iconfidant SSH versions prior to 2.3.8, update to version 2.3.8 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-0536

Produtos afetados

Cisco Service Control Engine

Icon Labs Iconfidant Ssh

Referências · 12

• https://nvd.nist.gov/vuln/detail/CVE-2008-0536 · Nota de Segurança
• http://securityfocus.com/bid/29609 · Nota
• http://kb.cert.org/vuls/id/626979 · Nota
• http://securityfocus.com/bid/29316 · Nota
• http://secunia.com/advisories/30316 · Aviso do Fabricante
• http://cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml · Correção, Aviso do Fabricante
• http://vupen.com/english/advisories/2008/1774/references · Aviso do Fabricante
• http://securitytracker.com/id?1020074 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42566 · Nota
• http://icon-labs.com/news/read.asp?newsID=77 · Nota
• http://vupen.com/english/advisories/2008/1604/references · Aviso do Fabricante
• http://secunia.com/advisories/30590 · Aviso do Fabricante