Design/Logic Flaw

The DHCP relay agent in Cisco Adaptive Security Appliance ASA and PIX 7.2 allows remote attackers to cause a denial of service dropped packets via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocat...

Authentication flaw

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.2 before 7.228, when using Layer 2 Tunneling Protocol L2TP or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors...

Race condition

Race condition in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2219, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service device reload via "non-standard SSL sessions."...

CVE-2007-2464

Race condition in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2219, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service device reload via "non-standard SSL sessions."...

CVE-2007-2464

Cisco ASA/PIX race condition (CVE-2007-2464) affects ASA and PIX (versions 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19) when using clientless SSL VPNs, allowing remote attackers to trigger a denial of service (device reload) via non-standard SSL sessions. The fault is a race condition in handling...

CVE-2007-2464

Race condition in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2219, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service device reload via "non-standard SSL sessions."...

CVE-2007-2461

The CVE affects Cisco ASA and PIX devices running ASA/PIX software 7.2(1)–7.2(2.14). The vulnerability is triggered by certain DHCP packets in a multi-DHCP-server environment, causing the DHCP relay agent to leak memory and the device to drop traffic (DoS). Cisco has confirmed the issue and relea...

CVE-2007-2461

The DHCP relay agent in Cisco Adaptive Security Appliance ASA and PIX 7.2 allows remote attackers to cause a denial of service dropped packets via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocat...

CVE-2007-2463

Cisco ASA/PIX vulnerabilities (CVE-2007-2463) affect ASA and PIX releases: 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17. Remote attackers can cause a denial of service (device reload) via VPN termination and password expiry issues. Mitigation: upgrade to 7.1(2)49 or later for 7.1 line, and to 7.2(...

CVE-2007-2462

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.2 before 7.228, when using Layer 2 Tunneling Protocol L2TP or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors...

Cisco PIX/ASA DHCP Relay Agent Memory Leak Vulnerability

Cisco PIX and Adaptive Security Appliance ASA software versions 7.21 through 7.22.14 contain a vulnerability that could allow an unauthenticated, remote attacker to cause an affected device to stop forwarding traffic. This vulnerability exists due to an error when handling specific DHCP packets...

LDAP and VPN Vulnerabilities in PIX and ASA Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

PT-2007-3788 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX versions 7.1 before 7.1249 Cisco Adaptive Security Appliance ASA and PIX versions 7.2 before 7.2219 Description: The issue is related to a race condition when using clientless SSL VPNs, allowing...

Cisco ASA fails to properly process DHCP relay packets

Overview The Cisco Adaptive Security Appliance contains a memory exhaustion vulnerability that may occur when the DHCP service relay is enabled. Description The Cisco Adaptive Security Appliance ASA is firewall that includes routing and intrusion prevention system IPS features. DHCP relay allows...

Cisco PIX and ASA authentication bypass vulnerability

Overview The Cisco ASA and PIX firewalls contain an authentication bypass vulnerability. This vulnerability may allow a remote attacker to gain unauthorized access to the internal network or firewall. Description The Cisco Adaptive Security Appliance ASA is firewall that includes routing and...

Cisco多个防火墙产品远程拒绝服务漏洞

Cisco PIX/ASA和防火墙服务模块（FWSM）可提供能够进行状态报文过滤和深层报文检查的防火墙服务。 Cisco PIX 500系列安全设备和Cisco ASA 5500系列自适应安全设备中存在多个安全漏洞： 增强型检查畸形HTTP通讯 +----------------------------------------------- 如果启用了增强型HTTP检查的话，则在检查畸形HTTP请求时Cisco PIX和ASA安全设 备可能崩溃。如果启用了HTTP应用检查的话，配置中会包含有类似于inspect http appfw...

Design/Logic Flaw

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.04.14 and 7.1 before 7.12.1, and the FWSM 2.x before 2.34.12 and 3.x before 3.13.24, when "inspect http" is enabled, allows remote attackers to cause a denial of service device reboot via malformed HTTP traffic...

Code injection

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.35.115, 7.0 before 7.05.2, and 7.1 before 7.12.5, and the FWSM 3.x before 3.13.24, when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service device reboot via malformed SIP packets...

Code injection

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service device reboot via malformed TCP packets...

CVE-2007-0959

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service device reboot via malformed TCP packets...