Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module Advisory ID: cisco-sa-20071017-fwsm http://www.cisco.com/warp/public/707/cisco-sa-20071017-fwsm.shtml Revision 1.0 For Public Release 2007 October 17 1600 UTC GMT...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances Advisory ID: cisco-sa-20071017-asa http://www.cisco.com/warp/public/707/cisco-sa-20071017-asa.shtml Revision 1.0 For Public Release 2007 October 17 1600 UTC GMT...

CVE-2007-5568: Improper Input Validation

Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module FWSM 3.15 and earlier, allow remote attackers to cause a denial of service device reload via a crafted MGCP packet, aka CSCsi90468 appliance and CSCsi00694 FWSM...

Multiple Vulnerabilities in Cisco PIX and ASA Appliance

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2007-4786

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

Command injection

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

CVE-2007-4786

Cisco ASA/PIX: The vulnerability affects ASA versions 7.0–7.0.7.1, 7.1–7.1.2.61, 7.2–7.2.2.34, and 8.0–8.0.2.11 when AAA is enabled. The issue arises from the system composing %ASA-5-111008 messages using the output of the "test aaa" command, which includes cleartext passwords, and sending them t...

CVE-2007-4786: Cleartext Transmission of Sensitive Information

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

Cisco Security Advisory: Vulnerability In Crypto Library

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability In Crypto Library Advisory ID: cisco-sa-20070522-crypto.shtml http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml Revision 1.0 For Public Release 2007 May 22 1300 UTC GMT -...

Cisco PIX/ASA设备多个远程拒绝服务及认证绕过漏洞

PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备（ASA）是可提供安全和VPN服务的模块化平台。 Cisco PIX/ASA设备中存在多个远程漏洞，远程攻击者可能利用此漏洞导致设备无法正常工作或绕过认证。 具体如下： 绕过LDAP认证 +------------------------- 使用LDAP AAA服务器对终止的L2TP IPSec隧道或远程管理会话进行认证的Cisco ASA 和PIX设备可能受认证绕过攻击的影响，更多信息请见以下公告： 2层隧道协议（L2TP） 必须将终止L2TP...

Cisco PIX/ASA DHCP中继远程拒绝服务漏洞

PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备（ASA）是可提供安全和VPN服务的模块化平台。 配置为使用DHCP中继代理功能的PIX和ASA设备中实现上存在漏洞，远程攻击者可能利用此漏洞导致设备拒绝服务。 如果从多个DHCP服务器接收到了DHCPACK消息响应DHCP客户端的DHCPREQUEST或DHCPINFORM消息的话，就可能导致消耗1550字节的块内存。仅在通过dhcprelay server命令配置了多个DHCP服务器的情况下才会出现这个漏洞。一旦完全消耗了1550字节块内存，设备就会开始丢包，导致无法转发报文。 Cisco...

Cisco Security Advisory: LDAP and VPN Vulnerabilities in PIX and ASA Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: LDAP and VPN Vulnerabilities in PIX and ASA Appliances Advisory ID: cisco-sa-20070502-asa http://www.cisco.com/warp/public/707/cisco-sa-20070502-asa.shtml Revision 1.0 Last Updated 2007 May 02 1600 UTC GMT For Public Release...

Cisco PIX / Adaptive Security Appliance firewalls multipls security vulnerabilities

LDAP authentication bypass. VPN connection and LDAP multiple denial of service...

Design/Logic Flaw

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

CVE-2007-2463

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

CVE-2007-2461

The DHCP relay agent in Cisco Adaptive Security Appliance ASA and PIX 7.2 allows remote attackers to cause a denial of service dropped packets via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocat...

Design/Logic Flaw

The DHCP relay agent in Cisco Adaptive Security Appliance ASA and PIX 7.2 allows remote attackers to cause a denial of service dropped packets via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocat...

Race condition

Race condition in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2219, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service device reload via "non-standard SSL sessions."...

Authentication flaw

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.2 before 7.228, when using Layer 2 Tunneling Protocol L2TP or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors...

CVE-2007-2464

Race condition in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2219, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service device reload via "non-standard SSL sessions."...