2740 matches found
CVE-2012-0378
CVE-2012-0378 affects Cisco ASA 5500 series with software 8.0–8.4. The issue allows remote attackers to cause a denial of service (connection limit exceeded) by triggering many stale connections, leading to an incorrect MPF connection count (Bug ID CSCtv19854). Exploitation details are not provid...
CVE-2011-3309
Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote attackers to obtain potentially sensitive information by reading IKE responder traffic, aka Bug ID CSCtt07749...
CVE-2012-0335
Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746...
CVE-2011-3285
CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCth63101...
CVE-2011-4006
The ESMTP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service CPU consumption via an unspecified closing sequence, aka Bug ID CSCtt32565...
Design/Logic Flaw
The ESMTP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service CPU consumption via an unspecified closing sequence, aka Bug ID CSCtt32565...
Code injection
Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote attackers to obtain potentially sensitive information by reading IKE responder traffic, aka Bug ID CSCtt07749...
Information disclosure
Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746...
Crlf injection
CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCth63101...
CVE-2011-4006
The ESMTP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service CPU consumption via an unspecified closing sequence, aka Bug ID CSCtt32565...
CVE-2011-4006
The CVE-2011-4006 issue affects Cisco ASA 5500 series with software 8.2–8.5, caused by a vulnerability in the ESMTP inspection feature that can be exploited to trigger a denial-of-service via an unspecified closing sequence, leading to CPU consumption. Remediation/mitigation reported in connected...
CVE-2012-0335
Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746...
CVE-2011-3309
Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote attackers to obtain potentially sensitive information by reading IKE responder traffic, aka Bug ID CSCtt07749...
CVE-2012-0335
Cisco ASA 5500 series devices running ASA software 7.2–8.4 are affected by an information-disclosure vulnerability in cut-through proxy authentication. The root cause is improper proxy authentication during attempts to cut through traffic, enabling unauthenticated remote attackers to obtain sensi...
CVE-2011-3309
CVE-2011-3309 affects Cisco ASA 5500 series devices running software 8.2 through 8.4, where the device processes IKE requests even when vpnclient mode is configured. The root cause is the acceptance and handling of IKE traffic that can be observed by reading responder traffic, enabling potential ...
CVE-2011-3285
CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCth63101...
CVE-2011-3285
CVE-2011-3285 describes a CRLF injection in the Cisco ASA 5500 series, affecting software versions 8.0 through 8.4 in the /+CSCOE+/logon.html endpoint. The vulnerability allows remote attackers to inject arbitrary HTTP headers and carry out HTTP response splitting via unspecified vectors (Bug ID ...
PT-2012-1779 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.2 through 8.5 Description: The issue allows remote attackers to cause a denial of service, specifically CPU consumption, on the affected devices. This is due to an...
Cisco ASA 5500 Series Multiple Vulnerabilities (cisco-sa-20120314-asa)
The remote Cisco ASA is missing a security patch and may be affected by the following issues : - When UDP inspection is enabled, inspecting malformed transit traffic could cause the device to reload. CVE-2012-0353 - When the Threat Detection feature is configured with the Scanning Threat Mode...
