PT-2013-5596 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2.x through 8.25.45 Cisco Adaptive Security Appliance ASA Software versions 8.3.x through 8.32.38 Cisco Adaptive Security Appliance ASA Software versions 8.4.x through 8.45.4 Cisco...

PT-2013-5597 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2.x through 8.25.45 Cisco Adaptive Security Appliance ASA Software versions 8.3.x through 8.32.38 Cisco Adaptive Security Appliance ASA Software versions 8.4.x through 8.46 Cisco...

PT-2013-4372 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.4.x before 8.43 Cisco Adaptive Security Appliance ASA Software versions 8.6.x before 8.61.3 Description: The issue arises from improper memory management when an AnyConnect SSL VPN...

Cisco ASA Next-Generation Firewall Fragmented Traffic DoS (cisco-sa-20130626-ngfw)

The remote Cisco ASA NGFW host is missing a security patch. It, therefore, could be affected by an issue that if successfully exploited, could result in a denial of service condition where the system reloads and/or stops processing/inspecting traffic. C Tenable Network Security, Inc...

CVE-2013-3458

Cisco Adaptive Security Appliances ASA devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to cause a denial of service device crash via a large volume of 1 SSL or 2 TLS traffic, aka Bug ID CSCuh19462...

Code injection

Cisco Adaptive Security Appliances ASA devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to cause a denial of service device crash via a large volume of 1 SSL or 2 TLS traffic, aka Bug ID CSCuh19462...

CVE-2013-3458

Cisco Adaptive Security Appliances ASA devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to cause a denial of service device crash via a large volume of 1 SSL or 2 TLS traffic, aka Bug ID CSCuh19462...

CVE-2013-3458

CVE-2013-3458 affects Cisco ASA SMP platforms where SSL/TLS certificate handling can crash the device under heavy SSL/TLS traffic. A remote attacker can trigger a denial of service by generating a large volume of traffic directed at the ASA. The issue is tied to the SSL/TLS certificate processing...

Cisco ASA Certificate Processing Denial of Service Vulnerability

Cisco Adaptive Security Appliance ASA Software versions for symmetric multi-processor SMP platforms contain a vulnerability that could allow an unauthenticated, remote attacker to trigger the device to crash. The vulnerability is due to the SSL/TLS certificate handling code. An attacker could...

Cisco ASA Protocol Inspection Connection Table Denial of Service Vulnerability

Cisco Adaptive Security Appliance ASA Software contains a vulnerability that could allow an unauthenticated, remote attacker to fill the connection table in the ASA preventing new connections to be established through the device. The vulnerability is due to the ASA not honoring the idle timeout f...

Input validation

The protocol-inspection feature on Cisco Adaptive Security Appliances ASA devices does not properly implement the idle timeout, which allows remote attackers to cause a denial of service connection-table exhaustion via crafted requests that use an inspected protocol, aka Bug ID CSCuh13899...

CVE-2013-3463

The protocol-inspection feature on Cisco Adaptive Security Appliances ASA devices does not properly implement the idle timeout, which allows remote attackers to cause a denial of service connection-table exhaustion via crafted requests that use an inspected protocol, aka Bug ID CSCuh13899...

CVE-2013-3463

The CVE-2013-3463 issue affects Cisco ASA Software where the protocol-inspection idle timeout is not honored for certain inspected connections. An unauthenticated, remote attacker can send crafted requests to exhaust the ASA’s connection table, causing a denial-of-service by preventing new connec...

OSPF LSA Manipulation Vulnerability in Cisco ASA (cisco-sa-20130801-lsaospf)

The remote Cisco ASA device is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability could be exploited by injecting specially crafted OSPF packets. Successful exploitation could allow an unauthenticated...

Cisco IOS / ASA / FWSM / NX-OS / StarOS OSPF protocol vulnerability

LSA packet routing table manipulation...

HTCSyncManagerUpdate DLL Hijacking

Exploit Title: HTCSyncManagerUpdate quserex.dll & mfc71enu.dll & mfc71loc.dll Path Subversion Arbitrary DLL Injection Code Execution Author: IranianDarkCodersTeam Discovered by A.CH12 Software Link: http://www.htc.com/ Version: 2.1.46.0 Tested on: Windows 7 //...

CVE-2013-0149

The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...

Cisco ASA WebVPN XSS

According to its self-reported version, the remote Cisco ASA is missing a security patch and is affected by a cross-site scripting vulnerability in the WebVPN portal login page. An attacker could exploit this by tricking a user into requesting a specially crafted URL, resulting in arbitrary scrip...

CVE-2013-3414

Cross-site scripting XSS vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances ASA devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances ASA devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080...