CVE-2014-3399: Improper Control of Generation of Code

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 9.2.2.4 and earlier does not properly manage session information during creation of a SharePoint handler, which allows remote authenticated users to overwrite arbitrary RAMFS cache files or inject Lua programs, and...

PT-2014-5289

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions 9.2.2.4 and earlier Description The issue is related to the SSL VPN implementation, which does not properly manage session information during the creation of a SharePoint handler. This...

CVE-2013-6691

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance ASA Software 9.0.4.1 and earlier allows remote CIFS servers to cause a denial of service device reload via a long share list, aka Bug ID CSCuj83344...

CVE-2013-6691: Improper Restriction of Operations within the Bounds of a Memory Buffer

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance ASA Software 9.0.4.1 and earlier allows remote CIFS servers to cause a denial of service device reload via a long share list, aka Bug ID CSCuj83344...

CVE-2013-5567: Uncontrolled Resource Consumption

Cisco Adaptive Security Appliance ASA Software 8.4.6 and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service traffic loop and device crash via a packet that triggers multiple matches, aka Bug...

PT-2014-2936

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions 8.4.6 and earlier Description A issue in the inspection and filter features of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to cause the...

Cisco Adaptive Security Appliance 8.x Web VPN FTP or CIFS Authentication Form Phishing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35475/info Cisco Adaptive Security Appliance ASA is prone to a vulnerability that can aid in phishing attacks. An attacker can exploit this issue to display a fake login window that's visually similar to the device's logi...

CVE-2014-2151: Undefined Security Weakness

The WebVPN portal in Cisco Adaptive Security Appliance ASA Software 8.4.7.15 and earlier allows remote authenticated users to obtain sensitive information via a crafted JavaScript file, aka Bug ID CSCui04520...

PT-2014-4511

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software version 8.4.7.15 and earlier Description A issue in the WebVPN portal allows remote authenticated users to obtain sensitive information via a crafted JavaScript file. This could enable an...

CVE-2014-3264: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA Software 9.1.5 and earlier allows remote authenticated users to cause a denial of service device reload via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561...

PT-2014-5160

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions 9.1.5 and earlier Description A denial of service issue exists, allowing remote authenticated users to cause a device reload via crafted attributes in a RADIUS packet. This issue is relat...

CVE-2014-2181: Improper Authentication

Cisco Adaptive Security Appliance ASA Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by reading the running configuration, aka Bug ID CSCun78551...

CVE-2014-2182: Improper Input Validation

Cisco Adaptive Security Appliance ASA Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service device reload via a crafted DHCPv6 packet, aka Bug ID CSCun45520...

PT-2014-4512 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A memory leak in the SIP inspection engine allows remote attackers to cause a denial of service via crafted SIP packets. This issue affects the Sessio...

CVE-2014-2154: Undefined Security Weakness

Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and instability via crafted SIP packets, aka Bug ID CSCuf67469...

Cisco Adaptive Security Appliance SSL VPN远程权限提升漏洞

Bugtraq ID:66748 CVE ID:CVE-2014-2127 Cisco ASA 5500系列自适应安全设备是用于提供安全和VPN服务的模块化平台，可提供防火墙、IPS、anti-X和VPN服务。 Cisco Adaptive Security Appliance ASA Software 8.25.48之前版本、8.32.40之前版本、8.47.9之前版本、8.61.13之前版本、9.04.1之前版本、9.14.3之前版本在SSL VPN门户连接中的权限验证时，没有正确处理管理会话信息，这可使经过身份验证的远程用户通过建立无客户端SSL...

Cisco Adaptive Security Appliance 远程权限提升漏洞

Bugtraq ID:66747 CVE ID:CVE-2014-2126 Cisco ASA 5500系列自适应安全设备是用于提供安全和VPN服务的模块化平台，可提供防火墙、IPS、anti-X和VPN服务。 Cisco Adaptive Security Appliance ASA Software 8.25.47之前版本、8.47.5之前版本、8.71.11之前版本、9.03.10之前版本、9.13.4之前版本在实现上存在安全漏洞，这可使经过身份验证的远程用户通过Level-0 ASDM访问，利用此漏洞获取权限。 0 Cisco Adaptive Security Applianc...

Code injection

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

CVE-2014-2126: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.4 before 8.47.5, 8.7 before 8.71.11, 9.0 before 9.03.10, and 9.1 before 9.13.4 allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496...