CVE-2007-0962

Cisco PIX 500, ASA 5500 Series, and FWSM devices are affected by a DoS vulnerability triggered by malformed HTTP traffic when the built-in HTTP inspection (inspect http) is enabled. A remote attacker can cause a device reboot, with impact described as an availability loss. Affected versions are: ...

Cisco Firewall Services Module vulnerable to DoS via inspection of malformed SIP messages

Overview Cisco Firewall Services Module fails to properly inspect SIP messages. This vulnerability may allow a remote attacker to cause a denial of service condition. Description The Cisco Firewall Services Module is an integrated firewall service for Cisco Catalyst 6500 series switches and Cisco...

Cisco Firewall Services Module, PIX and ASA SIP Message Denial of Service Vulnerability

Cisco Firewall Services Module, PIX Security Appliance, and ASA Security Appliance contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability exists due to an error when handling SIP messages. An unauthenticated, remo...

Cisco PIX and ASA TCP Traffic Inspection Denial of Service Vulnerability

Cisco PIX 500 Series Security Appliances and Cisco ASA 5500 Series Adaptive Security Appliances ASA contain a vulnerability that could allow an unauthenticated, remote attacker to crash an affected device, causing a denial of service DoS condition. This vulnerability exists due to insufficient...

Multiple IOS IPS Vulnerabilities

The Intrusion Prevention System IPS feature set of Cisco IOS® contains several vulnerabilities. These include: Fragmented IP packets may be used to evade signature inspection. IPS signatures utilizing the regular expression feature of the ATOMIC.TCP signature engine may cause a router to crash...

CVE-2006-4911

Unspecified vulnerability in Cisco IPS 5.0 before 5.06p2 and 5.1 before 5.12, when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a "crafted sequence of fragmented IP packets"...

CVE-2006-4911

The CVE-2006-4911 issue affects Cisco IPS, specifically versions prior to 5.0(6p2) and 5.1 prior to 5.1(2) when deployed in inline or promiscuous mode. A crafted sequence of fragmented IP packets could bypass traffic inspection, enabling attackers to pass malicious traffic without detection. Reme...

CVE-2006-4911

Unspecified vulnerability in Cisco IPS 5.0 before 5.06p2 and 5.1 before 5.12, when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a "crafted sequence of fragmented IP packets"...

CVE-2006-0994

Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption...

Design/Logic Flaw

Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption...

Authentication flaw

Cisco PIX/ASA 7.1.x before 7.12 and 7.0.x before 7.05, PIX 6.3.x before 6.3.5112, and FWSM 2.3.x before 2.34 and 3.x before 3.17, when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which...

PT-2006-1579 · Cisco +1 · Cisco Pix +3

Name of the Vulnerable Software and Affected Versions: Cisco PIX/ASA versions 7.1.x before 7.12 Cisco PIX/ASA versions 7.0.x before 7.05 Cisco PIX version 6.3.x before 6.3.5112 Cisco FWSM versions 2.3.x before 2.34 Cisco FWSM versions 3.x before 3.17 Description: The issue allows remote attackers...

Sophos Anti-Virus CAB Unpacking Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sophos AntiVirus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the unpacking of Microsoft Cabinet files that contain invalid folder count values...

Authentication flaw

Blue Coat Proxy Security Gateway OS SGOS 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters...

CVE-2006-0578

Blue Coat Proxy Security Gateway OS SGOS 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters...

CVE-2006-0578

Blue Coat Proxy Security Gateway OS SGOS 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, which allows remote attackers to bypass connection filters...

PT-2006-1640 · Blue Coat · Blue Coat Proxy Security Gateway Os

Name of the Vulnerable Software and Affected Versions: Blue Coat Proxy Security Gateway OS SGOS version 4.1.2.1 Description: The issue allows remote attackers to bypass connection filters due to the lack of enforcement of CONNECT rules when using Deep Content Inspection. Recommendations: For...

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...

SSH over Non Standard Ports

SSH is a network protocol that uses built-in encryption that prevents packet inspection. Network attacks can be encrypted inside SSH traffic to avoid detection...

CVE-2001-0530

Spearhead NetGAP 200 and 300 before build 78 are affected by a remote exploit that bypasses file blocking and content inspection via specially encoded URLs containing '%' characters. Impact is partial confidentiality according to CVSS v2. No explicit remediation is provided in the available docum...