Design/Logic Flaw

The HTTP server in Cisco Adaptive Security Appliance ASA 5500 devices 8.0 before 8.0315 and 8.1 before 8.115, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service device reload via a URI in a crafted SSL or HT...

CVE-2008-2736

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA 5500 devices 8.0315, 8.0316, 8.114, and 8.115, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames and passwords via unknown vectors, aka Bug ID CSCsq45636...

CVE-2008-2736

CVE-2008-2736 affects Cisco ASA 5500 series and PIX/ASA devices enabling clientless SSL VPN; vulnerability allows an attacker to obtain usernames and passwords via clientless VPN connections. Affected versions include ASA 5500 software 8.0(3)15, 8.0(3)16, 8.1(1)4, and 8.1(1)5. Root cause relates ...

CVE-2008-2734

Memory leak in the crypto functionality in Cisco Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service memory consumption and VPN hang via a...

CVE-2008-2733

CVE-2008-2733 affects Cisco PIX/ASA 5500 series when configured as a client VPN endpoint, allowing a remote attacker to cause a device reload (denial of service) via crafted IPSec client authentication. Affected software includes 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4. Ci...

CVE-2008-2735

CVE-2008-2735 affects Cisco ASA/PIX SSL VPN implementations. The URI Processing Error Vulnerability in SSL VPNs allows a remote attacker to trigger a denial-of-service (device reload) by crafting SSL/HTTP packets when clientless SSL VPN is configured. Affected software includes ASA/PIX 8.0 before...

CVE-2008-2734

CVE-2008-2734 arises from a memory leak in the crypto subsystem of Cisco ASA 5500 series when configured as a clientless SSL VPN endpoint. The affected versions are ASA 7.2 before 7.2(4)2, ASA 8.0 before 8.0(3)14, and ASA 8.1 before 8.1(1)4. A crafted SSL or HTTP packet can cause memory consumpti...

CVE-2008-2732

CVE-2008-2732 covers multiple erroneous SIP processing vulnerabilities in Cisco PIX and ASA (5500 series) that may cause device reloads via SIP inspection. Affected software versions include Cisco PIX/ASA releases prior to 7.0(7)16, 7.1 prior to 7.1(2)71, 7.2 prior to 7.2(4)7, 8.0 prior to 8.0(3)...

CVE-2008-2732

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

Cisco PIX and Cisco ASA multiple security vulnerabilities

Multiple DoS conditions on SIP parsing and VPN authentication, memory leaks, information leak...

Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA Advisory ID: cisco-sa-20080903-asa Revision 1.0 For Public Release 2008 September 3 1600 UTC GMT...

CVE-2008-2734: Undefined Security Weakness

Memory leak in the crypto functionality in Cisco Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service memory consumption and VPN hang via a...

CVE-2008-2733: Undefined Security Weakness

Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service device reload via a craft...

CVE-2008-2732: Undefined Security Weakness

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA Document ID: 105444 Advisory ID: cisco-sa-20080604-asa http://www.cisco.com/warp/public/707/cisco-sa-20080604-asa.shtml Revision 1.0 For Public Release 2008 June 04 1600 UTC...

Cisco PIX / ASA multiple security vulnerabilities

TCP ACKs DoS, TLS DoS, instant messenger DoS, HTTPs request parsing DoS, Control-plane ACLs feature bypass...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 and 8.1.x before 8.111 allows remote attackers to cause a denial of service device reload via a crafted Transport Layer Security TLS packet to the device interface...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.1.x before 7.1270, 7.2.x before 7.24, and 8.0.x before 8.0310 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface...