Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769...

Code injection

The Neighbor Discovery ND protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service CPU consumption and device hang by...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier allow remote attackers to cause a denial of service block exhaustion via EIGRP traffic that triggers an EIGRP multicast storm, aka Bug ID CSCtf20269...

CVE-2009-5037

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allow remote attackers to cause a denial of service ASDM syslog outage via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911...

CVE-2009-5037

Cisco ASA 5500 series devices with software before 8.2(3) are affected by CVE-2009-5037. The issue enables remote attackers to cause a denial of service (ASDM syslog outage) by sending a long URL, associated with Bug IDs CSCsm11264 and CSCtb92911. Exploitation details are not provided beyond the ...

CVE-2010-4680

The CVE-2010-4680 affects Cisco ASA 5500 series WebVPN: prior to 8.2(3), CIFS shares could be viewed even when CIFS file browsing was disabled, allowing remote authenticated users to bypass access restrictions via CIFS requests (Bug CSCsz80777). Impact is high: attackers with network access can a...

CVE-2010-4677

emWEB on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service daemon crash via a request for a document whose name contains space characters, aka Bug ID CSCsy08416...

CVE-2010-4675

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security...

CVE-2010-4674

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.24 and earlier allows remote attackers to cause a denial of service block exhaustion via multicast traffic, aka Bug ID CSCtg63992...

CVE-2010-4676

Cisco ASA 5500 series devices running software before 8.2(3) are affected by CVE-2010-4676. The issue allows remote authenticated users to cause a denial of service (device crash) by sending a high volume of IPsec traffic, identified as Bug ID CSCsx52748. The PT-2011-1631 entry confirms the vulne...

CVE-2010-4673

Cisco ASA 5500 series devices running software 8.2(4) and earlier are affected by CVE-2010-4673. The issue permits remote attackers to cause a denial-of-service through a flood of packets (Bug ID CSCtg06316). The affected component is the ASA software handling packet traffic on 8.2(4) and earlier...

CVE-2010-4676

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote authenticated users to cause a denial of service device crash via a high volume of IPsec traffic, aka Bug ID CSCsx52748...

CVE-2010-4679

CVE-2010-4679 affects Cisco ASA 5500 series devices running software before 8.2(3). The root cause is improper handling of OCSP connection failures, which can be triggered by remote OCSP responders and leads to denial of service via TCP socket exhaustion. The entry attributes this to Bug ID CSCsz...

CVE-2010-4672

CVE-2010-4672 affects Cisco ASA 5500 series devices running software 8.2(3) and earlier. The issue allows remote attackers to cause a denial-of-service through EIGRP traffic that triggers an EIGRP multicast storm (block exhaustion). The vulnerability is documented under Bug ID CSCtf20269. Affecte...

CVE-2010-4670

CVE-2010-4670 describes a DoS in the IPv6 Neighbor Discovery implementation on Cisco ASA 5500 series (software 8.2(3) and earlier) and Cisco PIX appliances. The vulnerability is triggered by malicious Router Advertisement floods from varying source addresses, exploiting the ND handling to cause C...

CVE-2010-4681

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901...

CVE-2010-4678

CVE-2010-4678 affects Cisco ASA 5500 series devices running software before 8.2(3). The issue permits packets to pass before the configuration is loaded, potentially allowing remote attackers to bypass intended access restrictions by sending traffic during device startup. The root cause is the pr...

CVE-2010-4675

Cisco ASA 5500 series devices running versions prior to 8.2(3) are affected by CVE-2010-4675 due to a bug (CSCsv40504) that causes improper determination of which interfaces TELNET connections should be permitted. This can allow remote authenticated users to bypass intended access restrictions by...

PT-2011-1632 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices with software prior to 8.23 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by requesting a document whose name contains spac...

PT-2011-1647 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.32 Description: The issue allows remote attackers to cause a denial of service, resulting in a device crash. This can be achieved by establishing a large number of...