PT-2011-1627 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.23 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically block exhaustion, via EIGRP traffic that triggers an EIGRP multicas...

PT-2011-1636 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.23 Description: The issue allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character. Recommendations: For versions prior ...

PT-2011-1625 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.23 and earlier Cisco PIX Security Appliances devices affected versions not specified Description: The issue concerns the Neighbor Discovery ND protocol implementation in th...

PT-2011-1631 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.23 Description: The issue allows remote authenticated users to cause a denial of service, resulting in a device crash, by sending a high volume of IPsec traffic...

CVE-2010-4688: Undefined Security Weakness

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash by making many SIP calls, aka Bug ID CSCte20030...

CVE-2010-4691: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742...

CVE-2010-4692: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash via a large number of LAN-to-LAN aka L2L IPsec sessions, aka Bug ID CSCth36592...

CVE-2010-4689: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 do not properly preserve ACL behavior after a migration, which allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied, aka Bug ID...

CVE-2010-4670: Undefined Security Weakness

The Neighbor Discovery ND protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service CPU consumption and device hang by...

CVE-2010-4679: Improper Input Validation

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 do not properly handle Online Certificate Status Protocol OCSP connection failures, which allows remote OCSP responders to cause a denial of service TCP socket exhaustion by rejecting connection attempts, aka Bug...

PT-2011-1646 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.32 Description: The issue allows remote attackers to cause a denial of service, resulting in a device crash, via multicast traffic. Recommendations: For versions...

CVE-2010-4678: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769...

CVE-2010-4354

The CVE covers a vulnerability in Cisco VPN products where remote attackers could enumerate valid VPN group names by sending an IKE Aggressive Mode packet with the group name in the ID field. Affected devices include ASA 5500 series, PIX 500 series, and VPN Concentrators 3000 series. Root cause i...

CVE-2010-4354: Exposure of Sensitive Information to an Unauthorized Actor

The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances ASA 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device,...

PT-2010-5431

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances ASA 5500 series devices affected versions not specified Cisco PIX Security Appliances 500 series devices affected versions not specified Cisco VPN Concentrators 3000 series devices affected versions not...

CVE-2010-2814

Unspecified vulnerability in the Transport Layer Security TLS implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.15, 8.1 before 8.12.44, 8.2 before 8.22.17, and 8.3 before 8.31.6 and Cisco PIX Security Appliances 500 series...

CVE-2010-2816

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.17, 8.1 before 8.12.45, and 8.2 before 8.22.13 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID...

CVE-2010-2817

Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 before 7.08.11, 7.1 and 7.2 before 7.25, 8.0 before 8.05.15, 8.1 before 8.12.44, 8.2 before 8.22.10, and 8.3 before 8.31.1 and Cisco PIX Security Appliances 500 seri...

CVE-2010-1578

Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.19, 8.1 before 8.12.47, and 8.2 before 8.22 and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause...

CVE-2010-1579

Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.19, 8.1 before 8.12.47, and 8.2 before 8.22 and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause...