CVE-2010-0149

CVE-2010-0149 affects Cisco ASA 5500 Series (and Cisco PIX 500) where remote attackers can trigger a TCP connection exhaustion DoS by sending crafted TCP segments during connection termination, leaving connections in CLOSEWAIT. Root cause is specific TCP segments that bypass normal termination ha...

CVE-2010-0569

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

CVE-2010-0568

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.7, 8.1 before 8.12.40, and 8.2 before 8.22.1; and Cisco PIX 500 Series Security Appliance; allows remote attackers to bypass NTLMv1 authentication via a crafted...

CVE-2010-0567

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.1, 8.1 before 8.12.37, and 8.2 before 8.21.15; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service active IPsec tunn...

CVE-2010-0566

Cisco ASA 5500 Series Vulnerability (CVE-2010-0566): a crafted TCP segment can trigger a reload/DoS when a nailed static NAT and the inline Cisco AIP-SSM are used. Affected: ASA 7.0.x, 7.1.x, 7.2.x, 8.0.x, 8.1.x, 8.2.x. First fixed releases: 7.2(4.45), 8.0(4.44), 8.1(2.35), 8.2(1.10). Mitigation:...

CVE-2010-0568

CVE-2010-0568 describes an NTLMv1 authentication bypass vulnerability affecting Cisco ASA 5500 Series (and PIX 500 Series) where a crafted username can bypass NTLMv1 authentication. The issue is documented in Cisco’s advisory with multiple related vulnerabilities; for NTLMv1 specifically, fixed s...

CVE-2010-0150

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

CVE-2010-0566

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

CVE-2010-0565

Cisco ASA 5500 Series is affected by CVE-2010-0565 via a WebVPN DTLS Denial of Service vulnerability. A malformed DTLS message sent to the DTLS port (default UDP 443) can cause a page fault and device reload when WebVPN and DTLS are enabled. Affected software versions include 7.2.x before 7.2(4.4...

CVE-2010-0569

CVE-2010-0569 is a Cisco ASA 5500 Series SIP Inspection DoS vulnerability. A malformed SIP message can trigger a reload of the appliance, affecting ASA versions 7.x, 8.0.x, 8.1.x and 8.2.x (including PIX 500). The Cisco advisory CSCsa-20100217-asa lists affected bug IDs CSCtc96018 among others an...

Cisco Fixes Holes in Multiple Products

Cisco has released updates to close numerous security holes in several of its products. The ASA 5500 Adaptive Security Appliances are most affected. They alone contain six vulnerabilities that can be exploited to remotely cripple or reboot a device via specially crafted TCP, SIP, SCCP or IKE...

Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities. Security advisory, cisco-sa-20100217-fwsm, addresses a vulnerability in the Cisco Firewall Services Module FWSM for the Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers. Successful and repeated exploitation ...

CVE-2010-0440

Cross-site scripting XSS vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.21, 8.12.7, and 8.05; allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not...

CVE-2010-0440

The CVE-2010-0440 issue is a Cross-Site Scripting (XSS) vulnerability in Cisco Secure Desktop (CSCOT) translation path. Affects Cisco Secure Desktop 3.4.2048 and earlier than 3.5, and is also implicated in Cisco ASA appliances running before 8.2(1), 8.1(2.7), and 8.0(5). The root cause is imprope...

Cisco Secure Desktop Remote Cross-Site Scripting Vulnerability

Cisco Secure Desktop contains a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to a lack of input sanitation in the Cisco Secure Desktop. An unauthenticated, remote attacker could exploit this vulnerability by...

Security feature bypass

The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance Cisco ASA 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might allow remote authenticated users to bypass intended access restrictions and access unauthorized web site...

CVE-2009-4455

The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance Cisco ASA 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might allow remote authenticated users to bypass intended access restrictions and access unauthorized web site...

CVE-2009-4455

The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance Cisco ASA 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might allow remote authenticated users to bypass intended access restrictions and access unauthorized web site...

CVE-2009-4455

The CVE affects Cisco ASA 5500 Series Adaptive Security Appliance (ASAs) with default configurations across software versions 7.0–8.2. The issue allows portal traffic to reach arbitrary backend servers, potentially letting remote authenticated users bypass intended access restrictions and reach u...