CVE-2008-2735

The HTTP server in Cisco Adaptive Security Appliance ASA 5500 devices 8.0 before 8.0315 and 8.1 before 8.115, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service device reload via a URI in a crafted SSL or HT...

CVE-2008-2733

Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service device reload via a craft...

CVE-2008-2057

The Instant Messenger IM inspection engine in Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.24, 8.0.x before 8.0310, and 8.1.x before 8.112 allows remote attackers to cause a denial of service via a crafted packet...

CVE-2008-2057

The Instant Messenger IM inspection engine in Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.24, 8.0.x before 8.0310, and 8.1.x before 8.112 allows remote attackers to cause a denial of service via a crafted packet...

CVE-2008-2055

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.1.x before 7.1270, 7.2.x before 7.24, and 8.0.x before 8.0310 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface...

PT-2008-3575 · Cisco · Cisco Asa 5500 Series Adaptive Security Appliances +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 7.2.x through 7.231 Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 8.0.x through 8.0216 Description: The issue allows remote...

PT-2008-3576 · Cisco · Cisco Asa 5500 Series Adaptive Security Appliances +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance version 8.0.x before 8.039 Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances affected versions not specified Description: The issue allo...

Cisco PIX / Adaptive Security Appliance DoS

Crash on TTL processing if decrement-ttl enabled...

Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability Advisory ID: cisco-sa-20080123-asa http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtml Revision 1.0 For Public Release 2008 January 23 1600 UTC GMT...

Command injection

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

CVE-2007-4786

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

Cisco PIX / Adaptive Security Appliance firewalls multipls security vulnerabilities

LDAP authentication bypass. VPN connection and LDAP multiple denial of service...

Design/Logic Flaw

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

CVE-2007-2463

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

CVE-2007-2462

CVE-2007-2462 affects Cisco ASA and PIX firewalls (ASA/PIX) running 7.2 prior to 7.2(2)8. The vulnerability allows remote attackers to bypass LDAP authentication and gain privileges when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, via unspecified vectors. Connected source...

CVE-2007-2463

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

PT-2007-3786 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX version 7.2 before 7.228 Description: The issue concerns an unspecified vulnerability that allows remote attackers to bypass LDAP authentication and gain privileges when using Layer 2 Tunneling...

PT-2007-3785 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX versions 7.21 through 7.22.14 Description: The issue allows remote attackers to cause a denial of service, resulting in dropped packets. This occurs when a DHCPREQUEST or DHCPINFORM message causes...

CVE-2007-0397

The Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.2.3 and Adaptive Security Device Manager ASDM before 5.22.54 do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitiv...

CVE-2005-3788

CVE-2005-3788 affects Cisco ASA versions 7.0(0)–7.0(4) in Active/Standby with a failing failover LAN interface. A race condition allows remote attackers to cause a denial of service by sending spoofed ARP responses from the active firewall’s IP, preventing the standby unit from becoming active. P...