# CVEs published 2008-09-26

19 CVEs were published on September 26, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2739](https://cve.now/CVE-2008-2739.md): The SERVICE.DNS signature engine in the Intrusion Prevention System (IPS) in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a deni (no CVSS)
- [CVE-2008-3637](https://cve.now/CVE-2008-3637.md): The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized varia (no CVSS)
- [CVE-2008-3638](https://cve.now/CVE-2008-3638.md): Java on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent applets from accessing file:// URLs, which allows remote attackers to execute arbi (no CVSS)
- [CVE-2008-3798](https://cve.now/CVE-2008-3798.md): Cisco IOS 12.4 allows remote attackers to cause a denial of service (device crash) via a normal, properly formed SSL packet that occurs duri (no CVSS)
- [CVE-2008-3799](https://cve.now/CVE-2008-3799.md): Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote a (no CVSS)
- [CVE-2008-3800](https://cve.now/CVE-2008-3800.md): Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications (no CVSS)
- [CVE-2008-3801](https://cve.now/CVE-2008-3801.md): Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications (no CVSS)
- [CVE-2008-3802](https://cve.now/CVE-2008-3802.md): Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, a (no CVSS)
- [CVE-2008-3803](https://cve.now/CVE-2008-3803.md): A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, som (no CVSS)
- [CVE-2008-3804](https://cve.now/CVE-2008-3804.md): Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12.2 and 12.4 allows rem (no CVSS)
- [CVE-2008-3805](https://cve.now/CVE-2008-3805.md): Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 ad (no CVSS)
- [CVE-2008-3806](https://cve.now/CVE-2008-3806.md): Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 ad (no CVSS)
- [CVE-2008-3807](https://cve.now/CVE-2008-3807.md): Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with "pr (no CVSS)
- [CVE-2008-3808](https://cve.now/CVE-2008-3808.md): Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted (no CVSS)
- [CVE-2008-3809](https://cve.now/CVE-2008-3809.md): Cisco IOS 12.0 through 12.4 on Gigabit Switch Router (GSR) devices (aka 12000 Series routers) allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2008-3810](https://cve.now/CVE-2008-3810.md): Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a d (no CVSS)
- [CVE-2008-3811](https://cve.now/CVE-2008-3811.md): Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a d (no CVSS)
- [CVE-2008-3812](https://cve.now/CVE-2008-3812.md): Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers (no CVSS)
- [CVE-2008-3813](https://cve.now/CVE-2008-3813.md): Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denia (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-09-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.