CVE-2009-4912

Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876...

CVE-2009-4915

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service device reload via unknown network traffic, as demonstrated by a "connection stress test," aka Bug ID CSCsq68451...

CVE-2009-4918

CVE-2009-4918 affects Cisco ASA 5580 series devices running software before 8.1(2). The issue allows remote attackers to trigger a denial of service by sending malformed NAT-T packets, causing the IKE process to hang. Root cause is tied to Bug ID CSCsr74439. The available information indicates th...

CVE-2008-7257

CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a sequence in a URI, or...

CVE-2009-4922

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote authenticated users to cause a denial of service traceback by establishing many IPsec L2L tunnels from remote peer IP addresses, aka Bug ID CSCso15583...

CVE-2009-4917

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service device reload via a high volume of SIP traffic, aka Bug ID CSCsr65901...

CVE-2009-4922

Cisco ASA 5580 series devices running software before 8.1(2) are affected by CVE-2009-4922. The issue enables remote authenticated users to trigger a denial of service (traceback) by establishing numerous IPsec L2L tunnels from remote peer IP addresses (Bug ID CSCso15583). Affected component/vers...

CVE-2009-4911

CVE-2009-4911 affects Cisco ASA 5580 series devices running software before 8.1(2). The vulnerability allows remote attackers to trigger a denial-of-service (device crash) through SSL VPN and PPPoE transaction vectors (Bug ID CSCsm77958). Affected component/condition: ASA 5580 with older software...

CVE-2009-4920

Cisco ASA 5580 series devices running software 8.1(2) are affected by CVE-2009-4920. The vulnerability (unspecified in the sources) allows remote attackers to cause a denial of service (watchdog traceback) by sending a large amount of small-packet data. Impact is noted as a complete availability ...

CVE-2009-4916

The CVE-2009-4916 vulnerability affects Cisco ASA 5580 series devices running software before 8.1(2). The issue, tied to Bug CSCsq80095, is an unspecified flaw that allows remote authenticated users to trigger a denial of service by performing a login action during failover replication, causing a...

CVE-2009-4922: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote authenticated users to cause a denial of service traceback by establishing many IPsec L2L tunnels from remote peer IP addresses, aka Bug ID CSCso15583...

CVE-2009-4918: Improper Input Validation

Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allow remote attackers to cause a denial of service IKE process hang via malformed NAT-T packets, aka Bug ID CSCsr74439...

CVE-2009-4914: Undefined Security Weakness

Memory leak on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service memory consumption via Subject Alternative Name fields in an X.509 certificate, aka Bug ID CSCsq17879...

CVE-2009-4919: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to have an unspecified impact via long IKE attributes, aka Bug ID CSCsu43121...

CVE-2009-4916: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote authenticated users to cause a denial of service console hang via a login action during failover replication, aka Bug ID CSCsq80095...

CVE-2009-4913: Undefined Security Weakness

The IPv6 implementation on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 exposes IP services on the "far side of the box," which might allow remote attackers to bypass intended access restrictions via IPv6 packets, aka Bug ID CSCso58622...

CVE-2009-4917: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service device reload via a high volume of SIP traffic, aka Bug ID CSCsr65901...

CVE-2009-4915: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service device reload via unknown network traffic, as demonstrated by a "connection stress test," aka Bug ID CSCsq68451...

CVE-2009-4921: Improper Input Validation

Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allow remote attackers to cause a denial of service traceback via malformed TCP packets, aka Bug ID CSCsm84110...

CVE-2009-4911: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service device crash via vectors involving SSL VPN and PPPoE transactions, aka Bug ID CSCsm77958...