CVE-2008-2739
Status: ModifiedHigh (7.8)—
Severity7.8High · CVSS 2.0
Exploitation probability2.68 %higher than 86% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
The SERVICE.DNS signature engine in the Intrusion Prevention System (IPS) in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device crash or hang) via network traffic that triggers unspecified IPS signatures, a different vulnerability than CVE-2008-1447.
CVSS
- Base score
- 7.8
- Version
- 2.0
- Vector
- AV:N/AC:L/Au:N/C:N/I:N/A:C
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 2.68 %
- Percentile among all scored CVEs
- 86
- Score date
- 10/22/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- NVD-CWE-noinfo
References
Show 8 references
- http://secunia.com/advisories/31990
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01556.shtml
- http://www.vupen.com/english/advisories/2008/2670
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6058
- http://secunia.com/advisories/31990
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01556.shtml
- http://www.vupen.com/english/advisories/2008/2670
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6058
Raw JSON (NVD)
Show
{
"id": "CVE-2008-2739",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-09-26T16:21:43.957",
"references": [
{
"url": "http://secunia.com/advisories/31990",
"tags": [
"Third Party Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01556.shtml",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2670",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6058",
"tags": [
"Broken Link"
],
"source": "psirt@cisco.com"
},
{
"url": "http://secunia.com/advisories/31990",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01556.shtml",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2670",
"tags": [
"Permissions Required",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6058",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The SERVICE.DNS signature engine in the Intrusion Prevention System (IPS) in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device crash or hang) via network traffic that triggers unspecified IPS signatures, a different vulnerability than CVE-2008-1447."
},
{
"lang": "es",
"value": "El motor de firma SERVICE.DNS en Intrusion Prevention System (IPS) en Cisco IOS v12.3 y v12.4, permite a atacantes remotos provocar una denegación de servicio (caída o cuelgue de dispositivo) a través de tráfico de red que lanza un firma IPS sin especificar. Vulnerabilidad distinta de CVE-2008-1447."
}
],
"lastModified": "2026-06-16T22:54:20.483",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0C3B413-76F7-413B-A51F-29834F9DE722"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3xl:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68FC4904-1F4D-4E10-AF95-911B07827598"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86B9E611-3F06-424C-96EF-EE4997C70AB9"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0A5760A-9FFE-4941-B2BD-7DD54B1E1B37"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98FE195E-084B-4F4C-800D-850165DED48C"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1976E53-85A6-494F-B8AC-847E7988850C"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "320C5597-68BE-4899-9EBB-9B4DEE8EA7DB"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "520304A4-EB15-42A8-A402-8251A4D2076D"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA88C064-898F-4C0D-A266-D7B3509C28A2"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "139B1182-61A3-4F3D-9E29-758F27917646"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CC3706F-B00A-405E-917E-7FD5217E0501"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DF4D0E3-8015-4D6F-8364-B6EEAAE67971"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BF9D6B6-E51F-44FF-97E5-15E0C4E9C3D7"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A25C42FA-37F4-4B7F-AFCA-D7F081F58CF4"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3za:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3870C62F-D086-419C-A0E6-815E9ED5DE3B"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99235FFB-4439-40B2-ADBD-B08E5DBBCCB9"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF610051-1638-4C1B-9864-11E34EFC4DE6"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78260223-50C0-48F8-9A65-AE67489E602C"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "883FA166-2973-42BA-842D-28FBDBFEAC4A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}