CVE-2014-0655

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization CoA messages, aka Bug ID CSCuj45332...

CVE-2014-0653

The Cisco ASA Identity Firewall (IDFW) NetBIOS logout probe vulnerability (CVE-2014-0653) stems from insufficient validation of NetBIOS probe responses, allowing an unauthenticated remote attacker to modify a user’s authentication state. Cisco notes the issue in Cisco-SA-20140108-CVE-2014-0653 an...

CVE-2014-0655

Cisco ASA with Identity Firewall (IDFW) is affected by CVE-2014-0655 due to insufficient validation of RADIUS Change of Authorization (CoA) messages, allowing unauthenticated remote attackers to replay crafted CoA messages and modify the IDFW user cache. This is tied to Bug CSCuj45332. The vulner...

CVE-2014-0653

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340...

CVE-2013-6707

Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier allows remote attackers to cause a denial of service multi-protocol management outage by making multiple management session requests, aka Bug ID CSCug33233...

Memory corruption

Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier allows remote attackers to cause a denial of service multi-protocol management outage by making multiple management session requests, aka Bug ID CSCug33233...

CVE-2013-6707

Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier allows remote attackers to cause a denial of service multi-protocol management outage by making multiple management session requests, aka Bug ID CSCug33233...

CVE-2013-6707

Cisco ASA Software 9.1(.3) and earlier is affected by CVE-2013-6707 due to a memory leak in the connection-manager, causing a denial of service by sending multiple management session requests. The vulnerability allows an unauthenticated, remote attacker to render the device unresponsive to manage...

Cisco Adaptive Security Appliance Management Connections Denial of Service Vulnerability

A vulnerability in the Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an affected system to become unresponsive to management session requests via SSH, Telnet, HTTP, and HTTPS. The vulnerability is due to a memory leak in the connection...

Cisco ASA ASDM Bruteforce Login Utility

This module scans for Cisco ASA ASDM web login portals and performs login brute force to identify valid credentials...

CVE-2013-6696

Cisco Adaptive Security Appliance ASA Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service device reload via a malformed response, aka Bug ID CSCuj28861...

Code injection

Cisco Adaptive Security Appliance ASA Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service device reload via a malformed response, aka Bug ID CSCuj28861...

CVE-2013-6696

Cisco ASA Software is affected by CVE-2013-6696 due to improper handling of DNS error cases when processing DNS replies, allowing an unauthenticated, remote attacker to trigger a denial-of-service (reload) via a malformed DNS response. The issue stems from DNS response processing in ASA’s DNS cod...

CVE-2013-6696

Cisco Adaptive Security Appliance ASA Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service device reload via a malformed response, aka Bug ID CSCuj28861...

Cisco Adaptive Security Appliance Malformed DNS Reply Denial of Service Vulnerability

A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause the reload of an affected system. The vulnerability is due to improper handling of DNS error cases when the Cisco ASA Software receives a DNS reply packet under a particular system...

CVE-2013-6682

The phone-proxy implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service connection-database corruption via an invalid entry, aka Bug ID CSCui33299...

CVE-2013-5568

The auto-update implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service device reload via crafted update data, aka Bug ID CSCui33308...

CVE-2013-5560

The IPv6 implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCue34342...

Code injection

The IPv6 implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCue34342...

Design/Logic Flaw

The phone-proxy implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service connection-database corruption via an invalid entry, aka Bug ID CSCui33299...