Multiple Vulnerabilities in Cisco PIX and Cisco ASA

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco PIX和Cisco ASA多个拒绝服务和信息泄漏漏洞

发布时间：2008-09-04 录入：启明星辰 BUGTRAQ ID: 30998 CVE ID：CVE-2008-2732 CVE-2008-2733 CVE-2008-2734 CVE-2008-2735 CVE-2008-2736 CNCVE ID：CNCVE-20082732 CNCVE-20082733 CNCVE-20082734 CNCVE-20082735 CNCVE-20082736 Cisco PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；Cisco ASA是一款可提供安全和VPN服务的模块化平台。 Cisco PIX和Cisco...

Design/Logic Flaw

The HTTP server in Cisco Adaptive Security Appliance ASA 5500 devices 8.0 before 8.0315 and 8.1 before 8.115, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service device reload via a URI in a crafted SSL or HT...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

Authentication flaw

Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service device reload via a craft...

CVE-2008-2733

Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service device reload via a craft...

CVE-2008-2734

Memory leak in the crypto functionality in Cisco Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service memory consumption and VPN hang via a...

Memory corruption

Memory leak in the crypto functionality in Cisco Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service memory consumption and VPN hang via a...

Design/Logic Flaw

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA 5500 devices 8.0315, 8.0316, 8.114, and 8.115, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames and passwords via unknown vectors, aka Bug ID CSCsq45636...

CVE-2008-2736

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA 5500 devices 8.0315, 8.0316, 8.114, and 8.115, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames and passwords via unknown vectors, aka Bug ID CSCsq45636...

CVE-2008-2733

CVE-2008-2733 affects Cisco PIX/ASA 5500 series when configured as a client VPN endpoint, allowing a remote attacker to cause a device reload (denial of service) via crafted IPSec client authentication. Affected software includes 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4. Ci...

CVE-2008-2736

CVE-2008-2736 affects Cisco ASA 5500 series and PIX/ASA devices enabling clientless SSL VPN; vulnerability allows an attacker to obtain usernames and passwords via clientless VPN connections. Affected versions include ASA 5500 software 8.0(3)15, 8.0(3)16, 8.1(1)4, and 8.1(1)5. Root cause relates ...

CVE-2008-2735

CVE-2008-2735 affects Cisco ASA/PIX SSL VPN implementations. The URI Processing Error Vulnerability in SSL VPNs allows a remote attacker to trigger a denial-of-service (device reload) by crafting SSL/HTTP packets when clientless SSL VPN is configured. Affected software includes ASA/PIX 8.0 before...

CVE-2008-2734

Memory leak in the crypto functionality in Cisco Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service memory consumption and VPN hang via a...

CVE-2008-2732

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

CVE-2008-2732

CVE-2008-2732 covers multiple erroneous SIP processing vulnerabilities in Cisco PIX and ASA (5500 series) that may cause device reloads via SIP inspection. Affected software versions include Cisco PIX/ASA releases prior to 7.0(7)16, 7.1 prior to 7.1(2)71, 7.2 prior to 7.2(4)7, 8.0 prior to 8.0(3)...

CVE-2008-2736

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA 5500 devices 8.0315, 8.0316, 8.114, and 8.115, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames and passwords via unknown vectors, aka Bug ID CSCsq45636...

CVE-2008-2734

CVE-2008-2734 arises from a memory leak in the crypto subsystem of Cisco ASA 5500 series when configured as a clientless SSL VPN endpoint. The affected versions are ASA 7.2 before 7.2(4)2, ASA 8.0 before 8.0(3)14, and ASA 8.1 before 8.1(1)4. A crafted SSL or HTTP packet can cause memory consumpti...

Cisco PIX and Cisco ASA multiple security vulnerabilities

Multiple DoS conditions on SIP parsing and VPN authentication, memory leaks, information leak...

Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA Advisory ID: cisco-sa-20080903-asa Revision 1.0 For Public Release 2008 September 3 1600 UTC GMT...