CVEvulnerability
CVE-2008-3815
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-10-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-287
Description
Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors.
Affected configurations
• cisco asa 5500
• cisco pix 7.0
• cisco pix 7.1
• cisco pix 7.2
• cisco pix 8.0
• cisco pix 8.1
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/32360 secunia.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml www.cisco.com
- http://www.securityfocus.com/bid/31864 www.securityfocus.com
- http://www.securitytracker.com/id?1021089 www.securitytracker.com
- http://www.securitytracker.com/id?1021090 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2899 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46024 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983 oval.cisecurity.org
- http://secunia.com/advisories/32360 secunia.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml www.cisco.com
- http://www.securityfocus.com/bid/31864 www.securityfocus.com
- http://www.securitytracker.com/id?1021089 www.securitytracker.com
- http://www.securitytracker.com/id?1021090 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2899 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46024 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983 oval.cisecurity.org