CVE-2007-2464

Cisco ASA/PIX race condition (CVE-2007-2464) affects ASA and PIX (versions 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19) when using clientless SSL VPNs, allowing remote attackers to trigger a denial of service (device reload) via non-standard SSL sessions. The fault is a race condition in handling...

CVE-2007-2464

Race condition in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2219, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service device reload via "non-standard SSL sessions."...

CVE-2007-2463

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

CVE-2007-2461

The CVE affects Cisco ASA and PIX devices running ASA/PIX software 7.2(1)–7.2(2.14). The vulnerability is triggered by certain DHCP packets in a multi-DHCP-server environment, causing the DHCP relay agent to leak memory and the device to drop traffic (DoS). Cisco has confirmed the issue and relea...

CVE-2007-2461

The DHCP relay agent in Cisco Adaptive Security Appliance ASA and PIX 7.2 allows remote attackers to cause a denial of service dropped packets via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocat...

CVE-2007-2463

Cisco ASA/PIX vulnerabilities (CVE-2007-2463) affect ASA and PIX releases: 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17. Remote attackers can cause a denial of service (device reload) via VPN termination and password expiry issues. Mitigation: upgrade to 7.1(2)49 or later for 7.1 line, and to 7.2(...

CVE-2007-2462

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.2 before 7.228, when using Layer 2 Tunneling Protocol L2TP or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors...

Cisco PIX/ASA DHCP Relay Agent Memory Leak Vulnerability

Cisco PIX and Adaptive Security Appliance ASA software versions 7.21 through 7.22.14 contain a vulnerability that could allow an unauthenticated, remote attacker to cause an affected device to stop forwarding traffic. This vulnerability exists due to an error when handling specific DHCP packets...

LDAP and VPN Vulnerabilities in PIX and ASA Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2007-2464: Undefined Security Weakness

Race condition in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2219, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service device reload via "non-standard SSL sessions."...

CVE-2007-2462: Undefined Security Weakness

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.2 before 7.228, when using Layer 2 Tunneling Protocol L2TP or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors...

PT-2007-3786 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX version 7.2 before 7.228 Description: The issue concerns an unspecified vulnerability that allows remote attackers to bypass LDAP authentication and gain privileges when using Layer 2 Tunneling...

PT-2007-3788 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX versions 7.1 before 7.1249 Cisco Adaptive Security Appliance ASA and PIX versions 7.2 before 7.2219 Description: The issue is related to a race condition when using clientless SSL VPNs, allowing...

Cisco PIX and ASA authentication bypass vulnerability

Overview The Cisco ASA and PIX firewalls contain an authentication bypass vulnerability. This vulnerability may allow a remote attacker to gain unauthorized access to the internal network or firewall. Description The Cisco Adaptive Security Appliance ASA is firewall that includes routing and...

CVE-2007-2463: Undefined Security Weakness

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

CVE-2007-2461: Undefined Security Weakness

The DHCP relay agent in Cisco Adaptive Security Appliance ASA and PIX 7.2 allows remote attackers to cause a denial of service dropped packets via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocat...

Cisco多个防火墙产品远程拒绝服务漏洞

Cisco PIX/ASA和防火墙服务模块（FWSM）可提供能够进行状态报文过滤和深层报文检查的防火墙服务。 Cisco PIX 500系列安全设备和Cisco ASA 5500系列自适应安全设备中存在多个安全漏洞： 增强型检查畸形HTTP通讯 +----------------------------------------------- 如果启用了增强型HTTP检查的话，则在检查畸形HTTP请求时Cisco PIX和ASA安全设 备可能崩溃。如果启用了HTTP应用检查的话，配置中会包含有类似于inspect http appfw...

Code injection

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.35.115, 7.0 before 7.05.2, and 7.1 before 7.12.5, and the FWSM 3.x before 3.13.24, when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service device reboot via malformed SIP packets...

Design/Logic Flaw

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.04.14 and 7.1 before 7.12.1, and the FWSM 2.x before 2.34.12 and 3.x before 3.13.24, when "inspect http" is enabled, allows remote attackers to cause a denial of service device reboot via malformed HTTP traffic...

Code injection

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service device reboot via malformed TCP packets...