Cisco ASA Software SharePoint RAMFS Integrity and Lua Injection Vulnerability

A vulnerability in the SSL VPN code of Cisco ASA Software could allow an authenticated, remote attacker to overwrite arbitrary files present on the RAMFS file system or inject Lua scripts. The vulnerability is due to insufficient validation of the code that handles session information for the SSL...

Cisco ASA Software Version Information Disclosure Vulnerability

A vulnerability in the SSL VPN code of Cisco ASA Software could allow an unauthenticated, remote attacker to obtain information about the Cisco ASA Software version. This information could be used for reconnaissance attacks. The vulnerability is due to verbose output returned when a specific URL ...

Design/Logic Flaw

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software allows remote attackers to obtain potentially sensitive software-version information by reading the verbose response data that is provided for a request to an unspecified URL, aka Bug ID CSCuq65542...

CVE-2014-3398

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software allows remote attackers to obtain potentially sensitive software-version information by reading the verbose response data that is provided for a request to an unspecified URL, aka Bug ID CSCuq65542...

CVE-2014-3398

Cisco ASA SSL VPN Information Disclosure (CVE-2014-3398) affects ASA Software. An unauthenticated, remote attacker can obtain the device software version by requesting a URL and triggering verbose response data disclosure (e.g., via SSL VPN URL endpoints). Root cause is verbose output returned by...

Cisco ASA WebVPN CIFS Share Enumeration DoS (CSCuj83344)

According to its banner, the version of the remote Cisco ASA device is affected by a denial of service vulnerability in the WebVPN CIFS Common Internet File System access function due to missing bounds checks on received responses when enumerating large amounts of shares on a CIFS server. A remot...

Cisco ASA Inspection and Filter Overlap DoS (CSCui45606)

According to its banner, the version of the remote Cisco ASA device is affected by a denial of service vulnerability due to improper handling of traffic matching both filtering and inspection criteria that could allow a remote attacker to cause the device to reset. TRUSTED...

CVE-2013-5567

Cisco Adaptive Security Appliance ASA Software 8.4.6 and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service traffic loop and device crash via a packet that triggers multiple matches, aka Bug...

CVE-2013-6691

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance ASA Software 9.0.4.1 and earlier allows remote CIFS servers to cause a denial of service device reload via a long share list, aka Bug ID CSCuj83344...

Code injection

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance ASA Software 9.0.4.1 and earlier allows remote CIFS servers to cause a denial of service device reload via a long share list, aka Bug ID CSCuj83344...

CVE-2013-5567

Cisco Adaptive Security Appliance ASA Software 8.4.6 and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service traffic loop and device crash via a packet that triggers multiple matches, aka Bug...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA Software 8.4.6 and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service traffic loop and device crash via a packet that triggers multiple matches, aka Bug...

CVE-2013-5567

Cisco Adaptive Security Appliance ASA Software 8.4.6 and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service traffic loop and device crash via a packet that triggers multiple matches, aka Bug...

CVE-2013-6691

CVE-2013-6691 affects Cisco ASA WebVPN CIFS: the CIFS access function fails bounds-checks when enumerating large shares, enabling an authenticated, remote attacker to trigger a DoS (device reload) on ASA devices running 9.0(.4.1) or earlier. The vulnerability stems from missing bounds checks on r...

CVE-2013-5567

CVE-2013-5567 affects Cisco ASA software 8.4(.6) and earlier, where a misconfiguration that overlaps filtering and inspection criteria can trigger a traffic loop and device crash, resulting in a DoS. The root cause is an internal traffic loop condition when a packet matches both filtering and ins...

Cisco ASA CIFS Share Enumeration Denial of Service Vulnerability

A vulnerability in the WebVPN Common Internet File System CIFS access function of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to trigger a reload of the affected device. The vulnerability is due to missing bounds checks on the response received from the CIF...

Cisco Adaptive Security Appliance Software Filter and Inspect Overlap Denial of Service Vulnerability

A vulnerability in the inspection and filter features of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to cause the affected system to reload. The vulnerability is due to an internal traffic loop condition that can be triggered when a received packet is...

Cisco ASA Appliance 7.x/8.0 WebVPN Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34307/info Cisco ASA is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to...

Cisco ASA <= 8.x VPN SSL module Clientless URL-list control bypass

No description provided by source...

Cisco ASA < 8.4.4.6 & 8.2.5.32 - Ethernet Information Leak

No description provided by source. !/usr/bin/env python CVE-2003-0001 'Etherleak' exploit ================================= Exploit for hosts which use a network device driver that pads ethernet frames with data which vary from one packet to another, likely taken from kernel memory, system memory...