CVE-2008-2441 : Cisco Secure ACS 3.x before 3.3(4) Build 12 patch 7, 4.0.x, 4.1.x before 4.1(4)

Cisco Secure ACS 3.x before 3.3(4) Build 12 patch 7, 4.0.x, 4.1.x before 4.1(4) Build 13 Patch 11, and 4.2.x before 4.2(0) Build 124 Patch 4 does not properly handle an EAP Response packet in which the value of the length field exceeds the actual packet length, which allows remote authenticated users to cause a denial of service (CSRadius and CSAuth service crash) or possibly execute arbitrary code via a crafted RADIUS (1) EAP-Response/Identity, (2) EAP-Response/MD5, or (3) EAP-Response/TLS Message Attribute packet.

Published 2008-09-04 16:41:00

Updated 2018-10-11 20:41:39

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2008-2441

Cisco » Secure Acs
cpe:2.3:a:cisco:secure_acs:*:*:*:*:*:*:*:*
Matching versions
Cisco » Secure Access Control Server
cpe:2.3:h:cisco:secure_access_control_server:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-2441

EPSS FAQ

7.25%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-2441

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2008-2441

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-2441

Jump to

Vulnerability Details : CVE-2008-2441

Products affected by CVE-2008-2441

Exploit prediction scoring system (EPSS) score for CVE-2008-2441

CVSS scores for CVE-2008-2441

CWE ids for CVE-2008-2441

References for CVE-2008-2441