Cisco Adaptive Security Appliance Information Disclosure Vulnerability

A vulnerability in the authorization code of Cisco ASA Software could allow an authenticated, remote attacker to access information stored on the file system of an affected system. The vulnerability is due to improper implementation of authorization controls when an unprivileged user tries to...

CVE-2014-2181

Cisco Adaptive Security Appliance ASA Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by reading the running configuration, aka Bug ID CSCun78551...

Code injection

Cisco Adaptive Security Appliance ASA Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by reading the running configuration, aka Bug ID CSCun78551...

CVE-2014-2181

Cisco Adaptive Security Appliance ASA Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by reading the running configuration, aka Bug ID CSCun78551...

CVE-2014-2181

CVE-2014-2181 affects Cisco ASA Software. An authenticated, remote attacker could exploit the HTTP server to read arbitrary files on the device (e.g., running configuration) via a crafted URL, due to improper authorization in the HTTP server component. Public sources in the connected documents co...

Cisco ASA multiple security vulnerabilities

Privilege escalation authentication bypass, DoS...

Cisco ASA SIP Inspection DoS (CSCuf67469)

The remote Cisco Adaptive Security Appliance ASA Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a memory leak which can be exploited to create a denial of service condition. The vulnerability is due to improper handling of Session Initiation Protoc...

Cisco Adaptive Security Appliance DHCPv6 Denial of Service Vulnerability

A vulnerability in the DHCP code of Cisco ASA Software could allow an unauthenticated, adjacent attacker to cause the reload of an affected system. The vulnerability is due to insufficient validation of crafted or malformed DHCP version 6 DHCPv6 packets when DHCPv6 replay feature is enabled. An...

CVE-2014-2182

Cisco Adaptive Security Appliance ASA Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service device reload via a crafted DHCPv6 packet, aka Bug ID CSCun45520...

Code injection

Cisco Adaptive Security Appliance ASA Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service device reload via a crafted DHCPv6 packet, aka Bug ID CSCun45520...

CVE-2014-2182

Cisco Adaptive Security Appliance ASA Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service device reload via a crafted DHCPv6 packet, aka Bug ID CSCun45520...

CVE-2014-2182

CVE-2014-2182 affects Cisco ASA Software when DHCPv6 replay is enabled. Affected: ASA DHCPv6 processing (replay validation) can be triggered by a crafted DHCPv6 packet, allowing an unauthenticated adjacent attacker to cause a denial of service via a device reload. Exploitation context: remote, re...

CVE-2014-2154

Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and instability via crafted SIP packets, aka Bug ID CSCuf67469...

Memory corruption

Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and instability via crafted SIP packets, aka Bug ID CSCuf67469...

CVE-2014-2154

Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and instability via crafted SIP packets, aka Bug ID CSCuf67469...

CVE-2014-2154

Cisco ASA Software SIP inspection engine memory leak vulnerability (CVE-2014-2154) allows remote, unauthenticated attackers to exhaust memory and cause instability/DoS by sending crafted SIP packets. Root cause: improper SIP packet handling in the SIP inspection engine. Impact: partial DoS due to...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20140409-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - An issue exists in the Adaptive Security Device Manager ADSM due to improper privilege assignment to users with a privilege level of zero. This issue allows an authenticated, remote attacker to gain...

Cisco ASA软件SSL VPN功能身份验证绕过漏洞

No description provided by source...

Cisco Adaptive Security Appliance 远程权限提升漏洞

Bugtraq ID:66747 CVE ID:CVE-2014-2126 Cisco ASA 5500系列自适应安全设备是用于提供安全和VPN服务的模块化平台，可提供防火墙、IPS、anti-X和VPN服务。 Cisco Adaptive Security Appliance ASA Software 8.25.47之前版本、8.47.5之前版本、8.71.11之前版本、9.03.10之前版本、9.13.4之前版本在实现上存在安全漏洞，这可使经过身份验证的远程用户通过Level-0 ASDM访问，利用此漏洞获取权限。 0 Cisco Adaptive Security Applianc...

CVE-2014-2128

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.3 before 8.32.40, 8.4 before 8.47.3, 8.6 before 8.61.13, 9.0 before 9.03.8, and 9.1 before 9.13.2 allows remote attackers to bypass authentication via 1 a crafted cookie value within modified HTTP...