Cisco ASA multiple security vulnerabilities

NTLM authentication bypass, multiple DoS conditions...

Code injection

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

Authentication flaw

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.7, 8.1 before 8.12.40, and 8.2 before 8.22.1; and Cisco PIX 500 Series Security Appliance; allows remote attackers to bypass NTLMv1 authentication via a crafted...

Denial of service

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.46, 8.0 before 8.04.38, 8.1 before 8.12.29, and 8.2 before 8.21.5; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service prevention of new connections via...

CVE-2010-0569

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

CVE-2010-0565

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10, allows remote attackers to cause a denial of service page fault and device reload via a malformed DTLS message, aka Bug ID CSCtb64913...

CVE-2010-0568

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.7, 8.1 before 8.12.40, and 8.2 before 8.22.1; and Cisco PIX 500 Series Security Appliance; allows remote attackers to bypass NTLMv1 authentication via a crafted...

Denial of service

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10, allows remote attackers to cause a denial of service page fault and device reload via a malformed DTLS message, aka Bug ID CSCtb64913...

Design/Logic Flaw

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.1, 8.1 before 8.12.37, and 8.2 before 8.21.15; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service active IPsec tunn...

Code injection

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

CVE-2010-0566

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

CVE-2010-0567

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.1, 8.1 before 8.12.37, and 8.2 before 8.21.15; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service active IPsec tunn...

Design/Logic Flaw

The Cisco Firewall Services Module FWSM 4.0 before 4.08, as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service crash via a malformed Skinny Client Control Protocol SCCP message...

CVE-2010-0149

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.46, 8.0 before 8.04.38, 8.1 before 8.12.29, and 8.2 before 8.21.5; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service prevention of new connections via...

CVE-2010-0150

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

Code injection

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

CVE-2010-0565

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10, allows remote attackers to cause a denial of service page fault and device reload via a malformed DTLS message, aka Bug ID CSCtb64913...

CVE-2010-0149

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.46, 8.0 before 8.04.38, 8.1 before 8.12.29, and 8.2 before 8.21.5; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service prevention of new connections via...

CVE-2010-0150

CVE-2010-0150 affects Cisco ASA 5500 Series and Cisco PIX 500 Series, where malformed SIP messages sent to transit traffic can trigger a denial-of-service that reloads the device when SIP inspection is enabled. Cisco’s advisory ties this to two SIP-inspection DoS bugs (CSCsy91157 and CSCtc96018) ...

CVE-2010-0567

CVE-2010-0567 affects Cisco ASA 5500 Series and Cisco PIX 500 Series. A vulnerability in processing malformed IKE messages through an existing IPsec tunnel to UDP port 4500 can cause denial of service by tearing down all IPsec tunnels terminating on the device and prevent new tunnels from being e...