Code injection

Unspecified vulnerability in CTM on Cisco Adaptive Security Appliances ASA 5580 series devices with software 8.12 allows remote attackers to cause a denial of service watchdog traceback via a large amount of small-packet data, aka Bug ID CSCsu11412...

CVE-2009-4921

CVE-2009-4921 affects Cisco ASA 5580 series devices running software prior to 8.1(2). The issue allows remote attackers to trigger a denial of service (traceback) by sending malformed TCP packets, identified as Bug ID CSCsm84110. Public references in the provided documents confirm the affected pr...

CVE-2009-4916

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote authenticated users to cause a denial of service console hang via a login action during failover replication, aka Bug ID CSCsq80095...

CVE-2009-4914

CVE-2009-4914 affects Cisco ASA 5580 series with software before 8.1(2). The vulnerability is a memory leak in the handling of Subject Alternative Name fields in X.509 certificates that may be exploited by remote attackers to cause a DoS via memory exhaustion. Connected docs consistently describe...

CVE-2009-4919

The CVE-2009-4919 issue affects Cisco ASA 5580 series devices. It is a buffer overflow in the IKE attribute handling that allows remote attackers to cause an unspecified impact. Root cause is an overflow triggered by long IKE attributes, referenced to Bug ID CSCsu43121. Mitigation is to upgrade t...

CVE-2009-4921

Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allow remote attackers to cause a denial of service traceback via malformed TCP packets, aka Bug ID CSCsm84110...

CVE-2009-4918

Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allow remote attackers to cause a denial of service IKE process hang via malformed NAT-T packets, aka Bug ID CSCsr74439...

CVE-2008-7257

Cisco ASA WebVPN (WebVPN on ASA) is affected by a CRLF injection/HTTP response splitting vulnerability tracked as CVE-2008-7257. The flaw occurs in +webvpn+/index.html for ASA 5580-series devices with software before 8.1(2). An attacker can craft a URL containing %0d%0a sequences to inject arbitr...

CVE-2009-4923

Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service traceback via TLS fragments, aka Bug ID CSCso53162...

CVE-2009-4923

Cisco ASA 5580 series devices running software before 8.1(2) are affected by an unspecified vulnerability in the DTLS implementation that allows remote attackers to cause a denial-of-service (traceback) via TLS fragments (Bug ID CSCso53162). The issue is documented across multiple feeds (NVD/Red ...

CVE-2009-4911

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service device crash via vectors involving SSL VPN and PPPoE transactions, aka Bug ID CSCsm77958...

CVE-2009-4912

CVE-2009-4912 (Cisco ASA 5580) affects ASA 5580 series with software before 8.1(2). The issue allows an SSL handshake with an HTTPS client that is unauthorized to complete, potentially bypassing intended access restrictions during an HTTPS session (Bug ID CSCso10876). The cited details indicate t...

CVE-2009-4913

Cisco ASA 5580 series devices running software before 8.1(2) have an IPv6 implementation issue (Bug CSCso58622) that exposes IP services on the far side of the box, potentially allowing remote attackers to bypass access restrictions via IPv6 packets. Affected product/component: Cisco ASA 5580; vu...

CVE-2009-4910

CVE-2009-4910 is an XSS vulnerability in the WebVPN portal of Cisco ASA 5580 series devices running software before 8.1(2) (Bug ID CSCsq78418). It allows remote attackers to inject arbitrary web script/HTML via unspecified vectors. Documented impact is limited to the browser-based context; no exp...

CVE-2009-4913

The IPv6 implementation on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 exposes IP services on the "far side of the box," which might allow remote attackers to bypass intended access restrictions via IPv6 packets, aka Bug ID CSCso58622...

CVE-2009-4914

Memory leak on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service memory consumption via Subject Alternative Name fields in an X.509 certificate, aka Bug ID CSCsq17879...

CVE-2009-4917

Cisco ASA 5580 series devices running software before 8.1(2) are affected by CVE-2009-4917, a vulnerability that allows remote attackers to cause a denial of service (device reload) by sending a high volume of SIP traffic (Bug ID CSCsr65901). The issue is described as an unspecified vulnerability...

CVE-2009-4910

Cross-site scripting XSS vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCsq78418...

CVE-2009-4915

CVE-2009-4915 affects Cisco ASA 5580 series devices running software prior to 8.1(2). The issue allows remote attackers to cause a denial of service (device reload) via unknown network traffic, demonstrated by a connection stress test (Bug CSCsq68451). Connected documents corroborate the same des...

CVE-2009-4912

Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876...