CVE-2010-4690: Improper Authentication

The Mobile User Security MUS service on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 does not properly authenticate HTTP requests from a Web Security appliance WSA, which might allow remote attackers to obtain sensitive information via a HEAD request, aka B...

CVE-2010-4689: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 do not properly preserve ACL behavior after a migration, which allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied, aka Bug ID...

CVE-2010-4674: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.24 and earlier allows remote attackers to cause a denial of service block exhaustion via multicast traffic, aka Bug ID CSCtg63992...

CVE-2010-4680: Undefined Security Weakness

The WebVPN implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, ak...

CVE-2010-4677: Undefined Security Weakness

emWEB on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service daemon crash via a request for a document whose name contains space characters, aka Bug ID CSCsy08416...

CVE-2010-4681: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901...

CVE-2010-4675: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security...

CVE-2010-4678: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769...

CVE-2010-4672: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier allow remote attackers to cause a denial of service block exhaustion via EIGRP traffic that triggers an EIGRP multicast storm, aka Bug ID CSCtf20269...

CVE-2010-4682: Undefined Security Weakness

Memory leak on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service memory consumption by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867...

CVE-2010-4354

The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances ASA 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device,...

CVE-2010-4354

The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances ASA 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device,...

CVE-2010-4354

The CVE covers a vulnerability in Cisco VPN products where remote attackers could enumerate valid VPN group names by sending an IKE Aggressive Mode packet with the group name in the ID field. Affected devices include ASA 5500 series, PIX 500 series, and VPN Concentrators 3000 series. Root cause i...

CVE-2010-2815

Unspecified vulnerability in the Transport Layer Security TLS implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.15, 8.1 before 8.12.44, 8.2 before 8.22.17, and 8.3 before 8.31.6 and Cisco PIX Security Appliances 500 series...

Code injection

Unspecified vulnerability in the Transport Layer Security TLS implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.15, 8.1 before 8.12.44, 8.2 before 8.22.17, and 8.3 before 8.31.6 and Cisco PIX Security Appliances 500 series...

Information disclosure

Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.19, 8.1 before 8.12.47, and 8.2 before 8.22 and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause...

Code injection

Unspecified vulnerability in the Transport Layer Security TLS implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.15, 8.1 before 8.12.44, 8.2 before 8.22.17, and 8.3 before 8.31.6 and Cisco PIX Security Appliances 500 series...

CVE-2010-2815

Unspecified vulnerability in the Transport Layer Security TLS implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.15, 8.1 before 8.12.44, 8.2 before 8.22.17, and 8.3 before 8.31.6 and Cisco PIX Security Appliances 500 series...

CVE-2010-1579

Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.19, 8.1 before 8.12.47, and 8.2 before 8.22 and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause...

CVE-2010-2816: Undefined Security Weakness

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.17, 8.1 before 8.12.45, and 8.2 before 8.22.13 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID...