CVE-2012-0378

CVE-2012-0378 affects Cisco ASA 5500 series with software 8.0–8.4. The issue allows remote attackers to cause a denial of service (connection limit exceeded) by triggering many stale connections, leading to an incorrect MPF connection count (Bug ID CSCtv19854). Exploitation details are not provid...

PT-2012-2532 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 through 8.4 Description: The issue allows remote attackers to cause a denial of service by triggering a large number of stale connections, resulting in an incorrect value...

CVE-2011-3309

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote attackers to obtain potentially sensitive information by reading IKE responder traffic, aka Bug ID CSCtt07749...

CVE-2011-4006

The ESMTP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service CPU consumption via an unspecified closing sequence, aka Bug ID CSCtt32565...

Information disclosure

Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746...

CVE-2012-0335

Cisco ASA 5500 series devices running ASA software 7.2–8.4 are affected by an information-disclosure vulnerability in cut-through proxy authentication. The root cause is improper proxy authentication during attempts to cut through traffic, enabling unauthenticated remote attackers to obtain sensi...

PT-2012-1682 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 through 8.4 Description: A CRLF injection issue exists in the /+CSCOE+/logon.html endpoint, allowing remote attackers to inject arbitrary HTTP headers and conduct HTTP...

PT-2012-1779 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.2 through 8.5 Description: The issue allows remote attackers to cause a denial of service, specifically CPU consumption, on the affected devices. This is due to an...

Cisco ASA 5500 Series Multiple Vulnerabilities (cisco-sa-20120314-asa)

The remote Cisco ASA is missing a security patch and may be affected by the following issues : - When UDP inspection is enabled, inspecting malformed transit traffic could cause the device to reload. CVE-2012-0353 - When the Threat Detection feature is configured with the Scanning Threat Mode...

Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability Advisory ID: cisco-sa-20120314-asaclient Revision 1.0 For Public Release 2012 March 14 16:00 UTC GMT...

CVE-2012-0353

The UDP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.5, 8.3 before 8.32.22, 8.4 before 8.42.1, and 8.5 before 8.51.2...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.4 before 8.42.11 and 8.5 before 8.51.4 allow remote attackers to cause a denial of service device reload via 1 IPv4 or 2 IPv6 packets that trigger...

CVE-2012-0356

CVE-2012-0356 affects Cisco ASA 5500 series and ASASM, plus the FWSM on Catalyst 6500, when multicast routing is enabled. The vulnerability arises from improper handling of PIM messages, potentially allowing a remote attacker to trigger a device reload. Affected software ranges include ASA/ASASM ...

CVE-2012-0358

Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 through 7.2 before 7.25.6, 8.0 before 8.05.26, 8.1 before 8.12.53, 8.2 before 8.25.18, 8.3...

CVE-2012-0353

The UDP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.5, 8.3 before 8.32.22, 8.4 before 8.42.1, and 8.5 before 8.51.2...

Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

PT-2012-2518 · Cisco +1 · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco ASA versions 7.0 through 7.2 before 7.25.6 Cisco ASA versions 8.0 before 8.05.26 Cisco ASA versions 8.1 before 8.12.53 Cisco ASA versions 8.2 before 8.25.18 Cisco ASA versions 8.3 before 8.32.28 Cisco ASA versions 8.4 before 8.42.16 Cis...

Design/Logic Flaw

The platform-sw component on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 before 8.25.3, 8.3 before 8.32.20, and 8.4 before 8.42.1 does not properly handle non-ASCII characters in an interface description, which allows local users to cause a denial of service reloa...

CVE-2011-2060

The platform-sw component on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 before 8.25.3, 8.3 before 8.32.20, and 8.4 before 8.42.1 does not properly handle non-ASCII characters in an interface description, which allows local users to cause a denial of service reloa...