Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 do not properly handle Online Certificate Status Protocol OCSP connection failures, which allows remote OCSP responders to cause a denial of service TCP socket exhaustion by rejecting connection attempts, aka Bug...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769...

Design/Logic Flaw

The WebVPN implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, ak...

Memory corruption

Memory leak on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service memory consumption by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867...

Code injection

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.24 and earlier allow remote attackers to cause a denial of service via a flood of packets, aka Bug ID CSCtg06316...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote authenticated users to cause a denial of service device crash via a high volume of IPsec traffic, aka Bug ID CSCsx52748...

Authentication flaw

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901...

Code injection

The Neighbor Discovery ND protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service CPU consumption and device hang by...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier allow remote attackers to cause a denial of service block exhaustion via EIGRP traffic that triggers an EIGRP multicast storm, aka Bug ID CSCtf20269...

CVE-2010-4673

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.24 and earlier allow remote attackers to cause a denial of service via a flood of packets, aka Bug ID CSCtg06316...

CVE-2009-5037

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allow remote attackers to cause a denial of service ASDM syslog outage via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911...

CVE-2010-4681

CVE-2010-4681 affects Cisco ASA 5500 series appliances running software prior to 8.2(3). The vulnerability allows remote attackers to bypass SMTP inspection by exploiting a prepended space in SMTP traffic, categorized as a partial impact on confidentiality, integrity, and availability. The issue ...

CVE-2010-4680

The CVE-2010-4680 affects Cisco ASA 5500 series WebVPN: prior to 8.2(3), CIFS shares could be viewed even when CIFS file browsing was disabled, allowing remote authenticated users to bypass access restrictions via CIFS requests (Bug CSCsz80777). Impact is high: attackers with network access can a...

CVE-2009-5037

Cisco ASA 5500 series devices with software before 8.2(3) are affected by CVE-2009-5037. The issue enables remote attackers to cause a denial of service (ASDM syslog outage) by sending a long URL, associated with Bug IDs CSCsm11264 and CSCtb92911. Exploitation details are not provided beyond the ...

CVE-2010-4677

CVE-2010-4677 affects Cisco ASA 5500 series devices running software before 8.2(3). The vulnerability allows remote attackers to cause a denial of service (daemon crash) by requesting a document whose name contains space characters in emWEB. Affected component is emWEB on ASA; root cause is input...

CVE-2010-4682

Cisco ASA 5500 series devices running software before 8.2(3) are affected by a memory leak that can be exploited by remote attackers via multiple incorrect LDAP authentication attempts, leading to a denial of service. The issue is documented as Bug CSCtf29867. A fix is available in version 8.2(3)...

CVE-2010-4674

CVE-2010-4674 affects Cisco ASA 5500 series devices running software 8.2(4) and earlier. The vulnerability allows remote attackers to cause a denial of service (block exhaustion) via multicast traffic (Bug ID CSCtg63992). Impact details are conveyed across sources: affected product is ASA 5500 se...

CVE-2010-4679

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 do not properly handle Online Certificate Status Protocol OCSP connection failures, which allows remote OCSP responders to cause a denial of service TCP socket exhaustion by rejecting connection attempts, aka Bug...

CVE-2010-4682

Memory leak on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service memory consumption by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867...

CVE-2010-4680

The WebVPN implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, ak...