{"api_version":"1","generated_at":"2026-07-23T10:00:07+00:00","cve":"CVE-2008-0536","urls":{"html":"https://cve.report/CVE-2008-0536","api":"https://cve.report/api/cve/CVE-2008-0536.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-0536","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-0536"},"summary":{"title":"CVE-2008-0536","description":"Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers \"illegal I/O operations,\" aka Bug ID CSCsh49563.","state":"PUBLISHED","assigner":"cisco","published_at":"2008-05-22 13:09:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-287","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.8","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://securitytracker.com/id?1020074","name":"http://securitytracker.com/id?1020074","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Cisco Service Control Engine SSH Server Bugs Let Remote Users Deny Service","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/29316","name":"http://www.securityfocus.com/bid/29316","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Service Control Engine SSH Server Multiple Denial of Service Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.icon-labs.com/news/read.asp?newsID=77","name":"http://www.icon-labs.com/news/read.asp?newsID=77","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"URL Shortener","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/29609","name":"http://www.securityfocus.com/bid/29609","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Icon Labs Iconfidant SSH Multiple Denial of Service Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2008/1774/references","name":"http://www.vupen.com/english/advisories/2008/1774/references","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/626979","name":"http://www.kb.cert.org/vuls/id/626979","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#626979","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42566","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42566","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30590","name":"http://secunia.com/advisories/30590","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Iconfidant SSH Denial of Service Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30316","name":"http://secunia.com/advisories/30316","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Service Control Engine SSH Server Denial of Service Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml","name":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Cisco Security Advisory: Cisco Service Control Engine Denial of Service Vulnerabilities - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/1604/references","name":"http://www.vupen.com/english/advisories/2008/1604/references","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0536","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0536","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"536","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"service_control_engine","cpe6":"3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"536","vulnerable":"1","versionEndIncluding":"3.1.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"service_control_engine","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"536","vulnerable":"1","versionEndIncluding":"2.3.7","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"icon-labs","cpe5":"iconfidant_ssh","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T07:46:55.108Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"30316","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30316"},{"name":"ADV-2008-1774","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1774/references"},{"name":"30590","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30590"},{"name":"29609","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/29609"},{"name":"cisco-sce-managementagent-dos(42566)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42566"},{"name":"VU#626979","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/626979"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.icon-labs.com/news/read.asp?newsID=77"},{"name":"20080521 Cisco Service Control Engine Denial of Service Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml"},{"name":"1020074","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1020074"},{"name":"29316","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/29316"},{"name":"ADV-2008-1604","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1604/references"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-05-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers \"illegal I/O operations,\" aka Bug ID CSCsh49563."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"30316","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30316"},{"name":"ADV-2008-1774","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/1774/references"},{"name":"30590","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30590"},{"name":"29609","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/29609"},{"name":"cisco-sce-managementagent-dos(42566)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42566"},{"name":"VU#626979","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/626979"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.icon-labs.com/news/read.asp?newsID=77"},{"name":"20080521 Cisco Service Control Engine Denial of Service Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml"},{"name":"1020074","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1020074"},{"name":"29316","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/29316"},{"name":"ADV-2008-1604","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/1604/references"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2008-0536","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers \"illegal I/O operations,\" aka Bug ID CSCsh49563."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"30316","refsource":"SECUNIA","url":"http://secunia.com/advisories/30316"},{"name":"ADV-2008-1774","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1774/references"},{"name":"30590","refsource":"SECUNIA","url":"http://secunia.com/advisories/30590"},{"name":"29609","refsource":"BID","url":"http://www.securityfocus.com/bid/29609"},{"name":"cisco-sce-managementagent-dos(42566)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42566"},{"name":"VU#626979","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/626979"},{"name":"http://www.icon-labs.com/news/read.asp?newsID=77","refsource":"CONFIRM","url":"http://www.icon-labs.com/news/read.asp?newsID=77"},{"name":"20080521 Cisco Service Control Engine Denial of Service Vulnerabilities","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml"},{"name":"1020074","refsource":"SECTRACK","url":"http://securitytracker.com/id?1020074"},{"name":"29316","refsource":"BID","url":"http://www.securityfocus.com/bid/29316"},{"name":"ADV-2008-1604","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1604/references"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2008-0536","datePublished":"2008-05-22T10:00:00.000Z","dateReserved":"2008-01-31T00:00:00.000Z","dateUpdated":"2024-08-07T07:46:55.108Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-05-22 13:09:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-287","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:service_control_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.6","matchCriteriaId":"AA9282CB-43A7-44C4-A678-D5C67D3CF310"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:service_control_engine:3.0:*:*:*:*:*:*:*","matchCriteriaId":"47EE0074-7A1C-44C3-AB50-DB1E7D06FF0B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icon-labs:iconfidant_ssh:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.7","matchCriteriaId":"1863D250-A98A-48FB-AFD1-8A73FC6F18CF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"536","Ordinal":"1","Title":"CVE-2008-0536","CVE":"CVE-2008-0536","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"536","Ordinal":"1","NoteData":"Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers \"illegal I/O operations,\" aka Bug ID CSCsh49563.","Type":"Description","Title":"CVE-2008-0536"},{"CveYear":"2008","CveId":"536","Ordinal":"2","NoteData":"2008-05-22","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"536","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}