Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability Advisory ID: cisco-sa-20120314-asaclient Revision 1.0 For Public Release 2012 March 14 16:00 UTC GMT...

Cisco Security Advisory: Cisco Firewall Services Module Crafted Protocol Independent Multicast Message Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Firewall Services Module Crafted Protocol Independent Multicast Message Denial of Service Vulnerability Advisory ID: cisco-sa-20120314-fwsm Revision 1.0 For Public Release 2012 March 14 16:00 UTC GMT...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Advisory ID: cisco-sa-20120314-asa Revision 1.0 For Public Release 2012 March 14 16:00 UTC GMT...

CVE-2012-0356

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.25.7, 8.0 before 8.05.27, 8.1 before 8.12.53, 8.2 before 8.25.8, 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.2...

CVE-2012-0358

Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 through 7.2 before 7.25.6, 8.0 before 8.05.26, 8.1 before 8.12.53, 8.2 before 8.25.18, 8.3...

CVE-2012-0353

The UDP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.5, 8.3 before 8.32.22, 8.4 before 8.42.1, and 8.5 before 8.51.2...

Code injection

The UDP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.5, 8.3 before 8.32.22, 8.4 before 8.42.1, and 8.5 before 8.51.2...

Buffer overflow

Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 through 7.2 before 7.25.6, 8.0 before 8.05.26, 8.1 before 8.12.53, 8.2 before 8.25.18, 8.3...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.25.7, 8.0 before 8.05.27, 8.1 before 8.12.53, 8.2 before 8.25.8, 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.2...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.4 before 8.42.11 and 8.5 before 8.51.4 allow remote attackers to cause a denial of service device reload via 1 IPv4 or 2 IPv6 packets that trigger...

CVE-2012-0354

The Threat Detection feature on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.0 through 8.2 before 8.25.20, 8.3 before 8.32.29, 8.4 before 8.43, 8.5 before 8.51.6, and 8.6 before 8.61.1 allows...

Design/Logic Flaw

The Threat Detection feature on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.0 through 8.2 before 8.25.20, 8.3 before 8.32.29, 8.4 before 8.43, 8.5 before 8.51.6, and 8.6 before 8.61.1 allows...

CVE-2012-0355

CVE-2012-0355 affects Cisco ASA/ASASM: software versions 8.4 before 8.4(2.11) and 8.5 before 8.5(1.4) may allow a remote attacker to trigger a denial of service (device reload) by IPv4 or IPv6 packets that generate syslog message 305006. Root cause is the handling of syslog-triggered events leadi...

CVE-2012-0358

CVE-2012-0358 affects Cisco ASA 5500 Series devices' Clientless VPN with the Cisco Port Forwarder ActiveX control (cscopf.ocx). The root cause is a buffer overflow in initialization parameters, enabling remote code execution. Affected software versions include ASA 7.0–7.2 (before 7.2(5.6)), 8.0 (...

CVE-2012-0354

CVE-2012-0354 affects Cisco ASA 5500 Series and ASA Services Module (ASASM) on Catalyst 6500. The Threat Detection feature, when configured with Scanning Threat and shun enabled, can be triggered by IPv4/IPv6 traffic to cause a device reload (DoS). Affected software versions and fixes per Cisco a...

CVE-2012-0355

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.4 before 8.42.11 and 8.5 before 8.51.4 allow remote attackers to cause a denial of service device reload via 1 IPv4 or 2 IPv6 packets that trigger...

CVE-2012-0356

CVE-2012-0356 affects Cisco ASA 5500 series and ASASM, plus the FWSM on Catalyst 6500, when multicast routing is enabled. The vulnerability arises from improper handling of PIM messages, potentially allowing a remote attacker to trigger a device reload. Affected software ranges include ASA/ASASM ...

CVE-2012-0354

The Threat Detection feature on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.0 through 8.2 before 8.25.20, 8.3 before 8.32.29, 8.4 before 8.43, 8.5 before 8.51.6, and 8.6 before 8.61.1 allows...

CVE-2012-0358

Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 through 7.2 before 7.25.6, 8.0 before 8.05.26, 8.1 before 8.12.53, 8.2 before 8.25.18, 8.3...

CVE-2012-0353

The UDP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.5, 8.3 before 8.32.22, 8.4 before 8.42.1, and 8.5 before 8.51.2...