CVE-2011-2060

CVE-2011-2060 affects Cisco ASA 5500 platform-sw component. Non-ASCII characters in an interface description can cause a denial of service (reload without configuration). Impact is local access required. Affected versions: ASA 5500 series 8.2 before 8.2(5.3); 8.3 before 8.3(2.20); 8.4 before 8.4(...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Advisory ID: cisco-sa-20111005-asa Revision 1.0 For Public Release 2011 October 05 1600 UTC GM...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.08.13, 7.1 and 7.2 before 7.25.4, 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.6, 8.3 before 8.32.23, 8.4 before 8.42.7, and 8.5...

Command injection

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.25.3, 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.11, 8.3 before 8.32.23, 8.4 before 8.42, and 8.5 before 8.51.1 allow remote...

CVE-2011-3301

CVE-2011-3301 covers SunRPC Inspection DoS in Cisco ASA 5500 Series and Cisco Catalyst 6500 Series ASA Services Module, plus FWSM; crafted SunRPC traffic can cause a remote device reload. The advisory lists affected software trains and the earliest fixed releases (e.g., ASA FWSM: 3.1→21, 3.2→22, ...

CVE-2011-3304

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.25.3, 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.11, 8.3 before 8.32.23, 8.4 before 8.42, and 8.5 before 8.51.1 allow remote...

CVE-2011-3304

CVE-2011-3304 affects Cisco ASA 5500 Series appliances and the ASA Services Module in Cisco Catalyst 6500 Series devices. The issue is a Denial of Service: unauthenticated remote attackers can trigger a device reload by sending crafted MSN Instant Messenger traffic to MSN IM inspection. Affects s...

PT-2011-4382 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services module in Cisco Catalyst 6500 series devices versions 7.2 before 7.25.3 Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services module in...

PT-2011-4379 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.0 through 7.08.12 Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.1 through 7.25.3 Cisco Adaptive Security Appliances ASA 5500 series devices versions...

PT-2011-4378 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.0 through 7.08.12 Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.1 through 7.25.3 Cisco Adaptive Security Appliances ASA 5500 series devices versions...

Cisco ASA 5500 Series Multiple Vulnerabilities (cisco-sa-20110223-asa)

The remote Cisco ASA device is missing a security patch and may be affected by the following issues : - When configured for transparent firewall mode, a packet buffer exhaustion vulnerability could cause the appliance to stop forwarding traffic. CVE-2011-0393 - When SCCP inspection is enabled, a...

CVE-2011-0395

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.20, 8.1 before 8.12.48, 8.2 before 8.23, and 8.3 before 8.32.1, when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service device reload...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 before 7.08.11, 7.1 and 7.2 before 7.25.1, 8.0 before 8.05.19, 8.1 before 8.12.47, 8.2 before 8.22.19, and 8.3 before 8.31.8; Cisco PIX Security Appliances 500 series devices; and Cisco Firewall Services Module aka FWSM...

CVE-2011-0395

Cisco ASA 5500 Series devices are affected by CVE-2011-0395 when RIP is enabled together with the Cisco Phone Proxy feature. The issue allows remote attackers to trigger a denial of service (device reload) via crafted RIP updates. Affected software versions include 8.0 before 8.0(5.20), 8.1 befor...

CVE-2011-0395

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.20, 8.1 before 8.12.48, 8.2 before 8.23, and 8.3 before 8.32.1, when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service device reload...

CVE-2011-0379

CVE-2011-0379 is a buffer overflow in Cisco TelePresence components triggered by crafted Cisco Discovery Protocol packets. Affected products include Cisco ASA 5500 series with software 1.6.x, Cisco TelePresence Multipoint Switch (CTMS) with 1.0.x–1.6.x, Cisco TelePresence endpoints (1.2.x–1.6.x),...

CVE-2011-0396

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.23, 8.1 before 8.12.49, 8.2 before 8.24.1, and 8.3 before 8.32.13, when a Certificate Authority CA is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352...

CVE-2011-0393

Cisco ASA 5500 Series and PIX 500 devices in transparent firewall mode (with IPv6 disabled) are affected by CVE-2011-0393 due to packet buffer exhaustion when IPv6 traffic is processed. Cisco bug CSCtj04707 describes this condition. Exploitation could cause a denial of service (packet buffers dep...

CVE-2011-0396

CVE-2011-0396 affects Cisco ASA 5500 Series devices with ASA software versions 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13). When a Certificate Authority (CA) is configured, remote attackers could read arbitrary files via unspecified vectors. This vuln...

Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...