Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

CVE-2009-1220

Cross-site scripting XSS vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances ASA 5520 with software 7.2430 and earlier 7.2 versions including 7.2222, and 8.0428 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject...

CVE-2008-3816

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.249 and 7.2410 allows remote attackers to cause a denial of service device reload via a crafted IPv6 packet...

CVE-2008-3817

Memory leak in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 8.0 before 8.04 and 8.1 before 8.12 allows remote attackers to cause a denial of service memory consumption via an unspecified sequence of packets, related to the "initialization code for the hardware...

CVE-2008-2735

The HTTP server in Cisco Adaptive Security Appliance ASA 5500 devices 8.0 before 8.0315 and 8.1 before 8.115, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service device reload via a URI in a crafted SSL or HT...

CVE-2008-2735

The HTTP server in Cisco Adaptive Security Appliance ASA 5500 devices 8.0 before 8.0315 and 8.1 before 8.115, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service device reload via a URI in a crafted SSL or HT...

CVE-2008-2733

Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service device reload via a craft...

CVE-2008-2057

The Instant Messenger IM inspection engine in Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.24, 8.0.x before 8.0310, and 8.1.x before 8.112 allows remote attackers to cause a denial of service via a crafted packet...

CVE-2008-2057

The Instant Messenger IM inspection engine in Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.24, 8.0.x before 8.0310, and 8.1.x before 8.112 allows remote attackers to cause a denial of service via a crafted packet...

CVE-2008-2055

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.1.x before 7.1270, 7.2.x before 7.24, and 8.0.x before 8.0310 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface...

PT-2008-3575 · Cisco · Cisco Asa 5500 Series Adaptive Security Appliances +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 7.2.x through 7.231 Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 8.0.x through 8.0216 Description: The issue allows remote...

PT-2008-3576 · Cisco · Cisco Asa 5500 Series Adaptive Security Appliances +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance version 8.0.x before 8.039 Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances affected versions not specified Description: The issue allo...

Cisco PIX / Adaptive Security Appliance DoS

Crash on TTL processing if decrement-ttl enabled...

Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability Advisory ID: cisco-sa-20080123-asa http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtml Revision 1.0 For Public Release 2008 January 23 1600 UTC GMT...

Command injection

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

CVE-2007-4786

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

Cisco PIX / Adaptive Security Appliance firewalls multipls security vulnerabilities

LDAP authentication bypass. VPN connection and LDAP multiple denial of service...

Design/Logic Flaw

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

CVE-2007-2463

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

CVE-2007-2462

CVE-2007-2462 affects Cisco ASA and PIX firewalls (ASA/PIX) running 7.2 prior to 7.2(2)8. The vulnerability allows remote attackers to bypass LDAP authentication and gain privileges when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, via unspecified vectors. Connected source...