CVE-2011-0396

CVE-2011-0396 affects Cisco ASA 5500 Series devices with ASA software versions 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13). When a Certificate Authority (CA) is configured, remote attackers could read arbitrary files via unspecified vectors. This vuln...

Use the IIS semicolon parsing upload vulnerability analysis-vulnerability warning-the black bar safety net

First look at the following a very common file upload extension filter code: fileExt=lcaseofile. FileExt arrUpFileType=splitUpFileType,"|" for i=0 to uboundarrUpFileType if fileEXT=trimarrUpFileTypei then EnableUpload=true exit for end if next if fileEXT="asp" or fileEXT="asa" or fileEXT="aspx" o...

Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

PT-2011-2316 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.0 through 7.08.10 Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.1 through 7.25.0 Cisco Adaptive Security Appliances ASA 5500 series devices versions...

PT-2011-2317 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 through 8.05.19 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.1 through 8.12.47 Cisco Adaptive Security Appliances ASA 5500 series devices version...

South Korea Forum program Artyboard 0day-vulnerability warning-the black bar safety net

Artyboard is Korea relatively early have an ASP language to get the forum,widely used in South Korea small website. ! A vulnerability exists in the Page editor/editorflash. asp Without verification you can upload, and upload to the root directory after the file name not be changed,in combination...

CVE-2010-4689

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 do not properly preserve ACL behavior after a migration, which allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied, aka Bug ID...

CVE-2010-4688

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash by making many SIP calls, aka Bug ID CSCte20030...

CVE-2010-4690

The Mobile User Security MUS service on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 does not properly authenticate HTTP requests from a Web Security appliance WSA, which might allow remote attackers to obtain sensitive information via a HEAD request, aka B...

CVE-2010-4691

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742...

CVE-2010-4692

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via a large number of LAN-to-LAN aka L2L IPsec sessions, aka Bug ID CSCth36592...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via a large number of LAN-to-LAN aka L2L IPsec sessions, aka Bug ID CSCth36592...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 do not properly preserve ACL behavior after a migration, which allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied, aka Bug ID...

Information disclosure

The Mobile User Security MUS service on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 does not properly authenticate HTTP requests from a Web Security appliance WSA, which might allow remote attackers to obtain sensitive information via a HEAD request, aka B...

Information disclosure

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash by making many SIP calls, aka Bug ID CSCte20030...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742...

CVE-2010-4691

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742...

CVE-2010-4688

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash by making many SIP calls, aka Bug ID CSCte20030...

CVE-2010-4690

The issue concerns Cisco ASA 5500 series devices’ Mobile User Security (MUS) service. Vulnerable component: MUS, which does not properly authenticate HTTP requests from a Web Security appliance (WSA). Root cause: improper authentication may allow an attacker to obtain sensitive information via a ...

CVE-2010-4688

Cisco ASA 5500 series devices (pre-8.3(2)) are affected by CVE-2010-4688 due to an issue in the SIP inspection feature that can cause a device crash when processing many SIP calls. The vulnerability affects ASA firmware versions prior to 8.3(2). The root cause is described as an unspecified vulne...