CVE-2008-3812

HighCVSS 7.1/10Last modified Jun 16, 2026

Description

Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed HTTP transit packet.

Metrics

CVSS 2.0 7.1/10AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/31990Third Party Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=16661Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01545.shtmlVendor Advisory
http://www.securityfocus.com/bid/31354Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020929Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2670Permissions Required
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5302Third Party Advisory
http://secunia.com/advisories/31990Third Party Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=16661Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01545.shtmlVendor Advisory
http://www.securityfocus.com/bid/31354Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1020929Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2670Permissions Required
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5302Third Party Advisory

Timeline

Published: Sep 26, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-38137.8Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denia CVE-2008-38145.8Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authe CVE-2008-38154.3Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before CVE-2008-38167.8Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2(4)9 and 7.2(4)10 allows re CVE-2008-38177.8Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2) allo CVE-2008-38187.8Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows re CVE-2008-38195.0dnsserver in Cisco Application Control Engine Global Site Selector (GSS) before 3.0(1) allows remote attackers to cause a denial of service CVE-2008-38206.8Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and I CVE-2008-38214.3Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbit CVE-2008-38234.3Cross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers t CVE-2008-38244.3Cross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x before 3.1.9 and 3.2.x before 3.2.2 and (2) extern CVE-2008-38254.4pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when