CVE-2007-5569

Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service device reload via a crafted TLS packet, aka CSCsg43276 and CSCsh97120...

CVE-2007-5569

Cisco PIX/ASA appliances running 7.1–7.2 are affected by a denial-of-service that can cause a device reload when processing MGCP or TLS traffic. The issue manifests when handling crafted packets to the appliance, with the root cause described as a flaw in processing certain MGCP/TLS data sequence...

Cisco PIX / ASA / Firewall Service Module multiple security vulnerabilities

Vulnerabilities on MGGP and TLS parsing...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances Advisory ID: cisco-sa-20071017-asa http://www.cisco.com/warp/public/707/cisco-sa-20071017-asa.shtml Revision 1.0 For Public Release 2007 October 17 1600 UTC GMT...

Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module Advisory ID: cisco-sa-20071017-fwsm http://www.cisco.com/warp/public/707/cisco-sa-20071017-fwsm.shtml Revision 1.0 For Public Release 2007 October 17 1600 UTC GMT...

Multiple Vulnerabilities in Cisco PIX and ASA Appliance

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2007-4786

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

CVE-2007-4786

Cisco ASA/PIX: The vulnerability affects ASA versions 7.0–7.0.7.1, 7.1–7.1.2.61, 7.2–7.2.2.34, and 8.0–8.0.2.11 when AAA is enabled. The issue arises from the system composing %ASA-5-111008 messages using the output of the "test aaa" command, which includes cleartext passwords, and sending them t...

CVE-2007-4786

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

PT-2007-5926 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA versions 7.0 through 7.0.7.1 Cisco Adaptive Security Appliance ASA versions 7.1 through 7.1.2.61 Cisco Adaptive Security Appliance ASA versions 7.2 through 7.2.2.34 Cisco Adaptive Security Appliance ASA...

Cisco Adaptive Security Appliance insecurely logs passwords

Overview The Cisco Adaptive Security Appliance ASA firewall may log user credentials, including passwords, as plain text when AAA authentication is enabled. Description The Cisco Adapative Security Appliance ASA is a firewall with Intrusion Protection System IPS, Stateful Packet Inspection SPI, a...

Sybase ASA Client Connection Broadcast Remote Information Disclosure

The remote Sybase SQL Anywhere / Adaptive Server Anywhere database is configured to listen for client connection broadcasts, which allows an attacker to see the name and port that the Sybase SQL Anywhere / Adaptive Server Anywhere server is running on. C David Lodge 13/08/2007 This script is base...

asa-2007-015.rb.txt

!/usr/bin/env ruby author = tenkeiev Script to test chaniax for the vuln in ASA-2007-015 Trigger subtypes of 11 or 12 will crash an unpatched server First establish a call - send new, recv accept, send ack, recv answer, send ack Then send IAX2 control packets with subtypes 0x0b or 0x0c that conta...

Cisco Security Advisory: Vulnerability In Crypto Library

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability In Crypto Library Advisory ID: cisco-sa-20070522-crypto.shtml http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml Revision 1.0 For Public Release 2007 May 22 1300 UTC GMT -...

Cisco PIX/ASA设备多个远程拒绝服务及认证绕过漏洞

PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备（ASA）是可提供安全和VPN服务的模块化平台。 Cisco PIX/ASA设备中存在多个远程漏洞，远程攻击者可能利用此漏洞导致设备无法正常工作或绕过认证。 具体如下： 绕过LDAP认证 +------------------------- 使用LDAP AAA服务器对终止的L2TP IPSec隧道或远程管理会话进行认证的Cisco ASA 和PIX设备可能受认证绕过攻击的影响，更多信息请见以下公告： 2层隧道协议（L2TP） 必须将终止L2TP...

Use download the vulnerability database to initiate network attacks-vulnerability warning-the black bar safety net

As scripting vulnerability the number one killer-and database download vulnerabilities, now has been more and more people to the art. In this information technology update Fast of the era, the vulnerability produced after the attendant is to respond to the tricks, such as change the database...

Cisco PIX/ASA DHCP中继远程拒绝服务漏洞

PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备（ASA）是可提供安全和VPN服务的模块化平台。 配置为使用DHCP中继代理功能的PIX和ASA设备中实现上存在漏洞，远程攻击者可能利用此漏洞导致设备拒绝服务。 如果从多个DHCP服务器接收到了DHCPACK消息响应DHCP客户端的DHCPREQUEST或DHCPINFORM消息的话，就可能导致消耗1550字节的块内存。仅在通过dhcprelay server命令配置了多个DHCP服务器的情况下才会出现这个漏洞。一旦完全消耗了1550字节块内存，设备就会开始丢包，导致无法转发报文。 Cisco...

Cisco Security Advisory: LDAP and VPN Vulnerabilities in PIX and ASA Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: LDAP and VPN Vulnerabilities in PIX and ASA Appliances Advisory ID: cisco-sa-20070502-asa http://www.cisco.com/warp/public/707/cisco-sa-20070502-asa.shtml Revision 1.0 Last Updated 2007 May 02 1600 UTC GMT For Public Release...

Cisco ASA clientless SSL VPN denial of service vulnerability

Overview The Cisco ASA firewall's SSL VPN component contains an denial-of-service vulnerability. Description The Cisco Adaptive Security Appliance ASA is firewall that includes routing, intrusion prevention system IPS, and VPN components. The clientless SSL VPN allows remote users with a web...

CVE-2007-2461

The DHCP relay agent in Cisco Adaptive Security Appliance ASA and PIX 7.2 allows remote attackers to cause a denial of service dropped packets via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocat...