{"api_version":"1","generated_at":"2026-07-23T09:16:08+00:00","cve":"CVE-2008-2057","urls":{"html":"https://cve.report/CVE-2008-2057","api":"https://cve.report/api/cve/CVE-2008-2057.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-2057","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-2057"},"summary":{"title":"CVE-2008-2057","description":"The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet.","state":"PUBLISHED","assigner":"cisco","published_at":"2008-06-04 21:32:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.4","severity":"","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","baseScore":5.4,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://secunia.com/advisories/30552","name":"http://secunia.com/advisories/30552","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco ASA and PIX Security Appliances Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1020181","name":"http://securitytracker.com/id?1020181","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco ASA Bug in IM Inspection Engine Lets Remote Users Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/1750/references","name":"http://www.vupen.com/english/advisories/2008/1750/references","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42837","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42837","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","name":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1020180","name":"http://securitytracker.com/id?1020180","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco PIX Firewall Bug in IM Inspection Engine Lets Remote Users Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2057","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2057","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"2057","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"adaptive_security_appliance_software","cpe6":"7.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2057","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"adaptive_security_appliance_software","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2057","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"pix_security_appliance","cpe6":"7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2057","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"pix_security_appliance","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T08:49:56.931Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1020180","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1020180"},{"name":"1020181","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1020181"},{"name":"20080604 Multiple Vulnerabilities in Cisco PIX and Cisco ASA","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml"},{"name":"30552","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30552"},{"name":"cisco-asa-pix-im-dos(42837)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42837"},{"name":"ADV-2008-1750","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1750/references"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-06-04T00:00:00.000Z","descriptions":[{"lang":"en","value":"The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"1020180","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1020180"},{"name":"1020181","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1020181"},{"name":"20080604 Multiple Vulnerabilities in Cisco PIX and Cisco ASA","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml"},{"name":"30552","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30552"},{"name":"cisco-asa-pix-im-dos(42837)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42837"},{"name":"ADV-2008-1750","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/1750/references"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2008-2057","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1020180","refsource":"SECTRACK","url":"http://securitytracker.com/id?1020180"},{"name":"1020181","refsource":"SECTRACK","url":"http://securitytracker.com/id?1020181"},{"name":"20080604 Multiple Vulnerabilities in Cisco PIX and Cisco ASA","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml"},{"name":"30552","refsource":"SECUNIA","url":"http://secunia.com/advisories/30552"},{"name":"cisco-asa-pix-im-dos(42837)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42837"},{"name":"ADV-2008-1750","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1750/references"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2008-2057","datePublished":"2008-06-04T21:00:00.000Z","dateReserved":"2008-05-02T00:00:00.000Z","dateUpdated":"2024-08-07T08:49:56.931Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-06-04 21:32:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","baseScore":5.4,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:7.2:*:*:*:*:*:*:*","matchCriteriaId":"ACF15BCE-C6B3-47CB-B716-51B95398A253"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_security_appliance:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9F8681FC-05B5-4AE3-A9CF-51879254404E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"95627941-30D8-452F-B6C8-76D2BEE93514"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4AFE6E41-E5C3-48AA-A534-A1AF3E86E3F0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"2057","Ordinal":"1","Title":"CVE-2008-2057","CVE":"CVE-2008-2057","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"2057","Ordinal":"1","NoteData":"The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet.","Type":"Description","Title":"CVE-2008-2057"},{"CveYear":"2008","CveId":"2057","Ordinal":"2","NoteData":"2008-06-04","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"2057","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}