CVE-2007-2464: Undefined Security Weakness

Race condition in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2219, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service device reload via "non-standard SSL sessions."...

PT-2007-3785 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX versions 7.21 through 7.22.14 Description: The issue allows remote attackers to cause a denial of service, resulting in dropped packets. This occurs when a DHCPREQUEST or DHCPINFORM message causes...

CVE-2007-0397

The Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.2.3 and Adaptive Security Device Manager ASDM before 5.22.54 do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitiv...

CVE-2007-0397: Undefined Security Weakness

The Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.2.3 and Adaptive Security Device Manager ASDM before 5.22.54 do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitiv...

CVE-2006-4312: Undefined Security Weakness

Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0x up to 7.05 and 7.1x up to 7.12.4, and Firewall Services Module FWSM 3.1x up to 3.11.6, causes the EXEC password, local user passwords, and the enable password to be changed to a "non-rando...

CVE-2006-3073: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances ASA, when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in ...

CVE-2005-3788

CVE-2005-3788 affects Cisco ASA versions 7.0(0)–7.0(4) in Active/Standby with a failing failover LAN interface. A race condition allows remote attackers to cause a denial of service by sending spoofed ARP responses from the active firewall’s IP, preventing the standby unit from becoming active. P...

CVE-2005-3788: Undefined Security Weakness

Race condition in Cisco Adaptive Security Appliance ASA 7.00, 7.02, and 7.04, when running with an Active/Standby configuration and when the failover LAN interface fails, allows remote attackers to cause a denial of service standby firewall failure by sending spoofed ARP responses from an IP...

PT-2005-4539 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA versions 7.00 through 7.04 Description: The issue is related to a race condition that occurs when the Cisco Adaptive Security Appliance ASA is running with an Active/Standby configuration and the failover...