Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA Document ID: 105444 Advisory ID: cisco-sa-20080604-asa http://www.cisco.com/warp/public/707/cisco-sa-20080604-asa.shtml Revision 1.0 For Public Release 2008 June 04 1600 UTC...

Cisco PIX / ASA multiple security vulnerabilities

TCP ACKs DoS, TLS DoS, instant messenger DoS, HTTPs request parsing DoS, Control-plane ACLs feature bypass...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors...

CVE-2008-2058

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.232 and 8.0.x before 8.0217 allows remote attackers to cause a denial of service device reload via a port scan against TCP port 443 on the device...

CVE-2008-2059

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors...

CVE-2008-2055

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.1.x before 7.1270, 7.2.x before 7.24, and 8.0.x before 8.0310 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.1.x before 7.1270, 7.2.x before 7.24, and 8.0.x before 8.0310 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface...

CVE-2008-2056

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 and 8.1.x before 8.111 allows remote attackers to cause a denial of service device reload via a crafted Transport Layer Security TLS packet to the device interface...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 and 8.1.x before 8.111 allows remote attackers to cause a denial of service device reload via a crafted Transport Layer Security TLS packet to the device interface...

CVE-2008-2056

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 and 8.1.x before 8.111 allows remote attackers to cause a denial of service device reload via a crafted Transport Layer Security TLS packet to the device interface...

CVE-2008-2056

The CVE-2008-2056 issue affects Cisco ASA/PIX security appliances (ASA 5500 series) where a crafted TLS packet sent to the device interface can cause a DoS (device reload). Affected: 8.0.x before 8.0(3)9 and 8.1.x before 8.1(1)1. Remediation: upgrade to 8.0(3)9 or later (8.0.x) or 8.1(1)1 or late...

CVE-2008-2059

Cisco ASA/PIX security appliances with software version 8.0.x before 8.0(3)9 are vulnerable to CVE-2008-2059, a control-plane ACL bypass vulnerability. The advisory describes multiple independent issues and, for this CVE, enabling bypass via unknown vectors could allow malicious traffic to reach ...

CVE-2008-2059

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors...

CVE-2008-2057

CVE-2008-2057 covers a denial-of-service vulnerability in the Instant Messenger (IM) inspection engine of Cisco ASA/PIX devices. A crafted packet can trigger a DoS condition on affected appliances. The entry explicitly maps to Cisco advisories documenting an IM inspection vulnerability (CVE-2008-...

CVE-2008-2055

The CVE-2008-2055 issue affects Cisco ASA/PIX IOS on 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10. It permits remote attackers to cause a denial-of-service by sending crafted TCP ACK packets to the device interface. Cisco’s advisory lists the first fixed software releases...

CVE-2008-2058

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.232 and 8.0.x before 8.0217 allows remote attackers to cause a denial of service device reload via a port scan against TCP port 443 on the device...

CVE-2008-2058

CVE-2008-2058 affects Cisco ASA/PIX 7.2.x before 7.2(3)2 and 8.0.x before 8.0(2)17. The DoS is triggered by a port scan to TCP port 443, causing a device reload. The issue is one of several vulnerabilities described in Cisco’s ASA/PIX advisory; exploitation leads to a reload/DoS on affected devic...

Multiple Vulnerabilities in Cisco PIX and Cisco ASA

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

PT-2008-3575 · Cisco · Cisco Asa 5500 Series Adaptive Security Appliances +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 7.2.x through 7.231 Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 8.0.x through 8.0216 Description: The issue allows remote...