PT-2008-2164 · Icon+1 · Icon Labs Iconfidant Ssh+1

Published 2008-05-22 · Updated 2017-08-08 · CVE-2008-0536

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Service Control Engine (SCE) versions 3.0.x through 3.0.6 Cisco Service Control Engine (SCE) versions 3.1.x through 3.0.x Icon Labs Iconfidant SSH versions prior to 2.3.8

Description The issue allows remote attackers to cause a denial of service, specifically a management interface outage, via SSH traffic during management operations. This is triggered by "illegal I/O operations".

Recommendations For Cisco Service Control Engine (SCE) versions 3.0.x through 3.0.6, update to version 3.0.7 or later. For Cisco Service Control Engine (SCE) versions 3.1.x through 3.0.x, update to version 3.1.0 or later. For Icon Labs Iconfidant SSH versions prior to 2.3.8, update to version 2.3.8 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-0536

Affected Products

Cisco Service Control Engine

Icon Labs Iconfidant Ssh

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2008-0536 · Security Note
• http://secunia.com/advisories/30316 · Vendor Advisory
• http://vupen.com/english/advisories/2008/1774/references · Vendor Advisory
• http://vupen.com/english/advisories/2008/1604/references · Vendor Advisory
• http://secunia.com/advisories/30590 · Vendor Advisory
• http://securityfocus.com/bid/29609 · Note
• http://kb.cert.org/vuls/id/626979 · Note
• http://securityfocus.com/bid/29316 · Note
• http://cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml · Patch, Vendor Advisory
• http://securitytracker.com/id?1020074 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42566 · Note
• http://icon-labs.com/news/read.asp?newsID=77 · Note