CVE-2009-4921

CVE-2009-4921 affects Cisco ASA 5580 series devices running software prior to 8.1(2). The issue allows remote attackers to trigger a denial of service (traceback) by sending malformed TCP packets, identified as Bug ID CSCsm84110. Public references in the provided documents confirm the affected pr...

CVE-2009-4912

CVE-2009-4912 (Cisco ASA 5580) affects ASA 5580 series with software before 8.1(2). The issue allows an SSL handshake with an HTTPS client that is unauthorized to complete, potentially bypassing intended access restrictions during an HTTPS session (Bug ID CSCso10876). The cited details indicate t...

CVE-2008-7257

CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a sequence in a URI, or...