CVE-2009-1203: Undefined Security Weakness

WebVPN on the Cisco Adaptive Security Appliances ASA device with software 8.04, 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party 1 FTP and 2 CIFS servers, which makes it easier for remote attackers to trick a user into sending...

CVE-2009-1201: Improper Neutralization of Input During Web Page Generation

Eval injection vulnerability in the cscowrapjs function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances ASA device with software 8.04, 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting XSS attacks by setting CSCOWebVPN'process...

Cisco Adaptive Security Appliance 8.x - Web VPN FTP or CIFS Authentication Form Phishing

Cisco Adaptive Security Appliance 8.x - Web VPN FTP or CIFS Authentication Form Phishing source: https://www.securityfocus.com/bid/35475/info Cisco Adaptive Security Appliance ASA is prone to a vulnerability that can aid in phishing attacks. An attacker can exploit this issue to display a fake...

Cisco Adaptive Security Appliance 8.x - Web VPN FTP or CIFS Authentication Form Phishing

source: https://www.securityfocus.com/bid/35475/info Cisco Adaptive Security Appliance ASA is prone to a vulnerability that can aid in phishing attacks. An attacker can exploit this issue to display a fake login window that's visually similar to the device's login window, which may mislead users...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances Advisory ID: cisco-sa-20090408-asa http://www.cisco.com/warp/public/707/cisco-sa-20090408-asa.shtml Revision 1.0 For Public...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

CVE-2009-1157: Undefined Security Weakness

Memory leak on Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2430, 8.0 before 8.0428, and 8.1 before 8.1219 allows remote attackers to cause a denial of service memory consumption or device reload via a crafted TCP...

CVE-2009-1156: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

CVE-2009-1220

Cross-site scripting XSS vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances ASA 5520 with software 7.2430 and earlier 7.2 versions including 7.2222, and 8.0428 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject...

CVE-2009-1220: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances ASA 5520 with software 7.2430 and earlier 7.2 versions including 7.2222, and 8.0428 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject...

CVE-2008-3816

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.249 and 7.2410 allows remote attackers to cause a denial of service device reload via a crafted IPv6 packet...

CVE-2008-3817

Memory leak in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 8.0 before 8.04 and 8.1 before 8.12 allows remote attackers to cause a denial of service memory consumption via an unspecified sequence of packets, related to the "initialization code for the hardware...

CVE-2008-3816: Undefined Security Weakness

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.249 and 7.2410 allows remote attackers to cause a denial of service device reload via a crafted IPv6 packet...

CVE-2008-3815: Improper Authentication

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.083, 7.1 before 7.1278, 7.2 before 7.2416, 8.0 before 8.046, and 8.1 before 8.1113, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote...

CVE-2008-3817: Undefined Security Weakness

Memory leak in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 8.0 before 8.04 and 8.1 before 8.12 allows remote attackers to cause a denial of service memory consumption via an unspecified sequence of packets, related to the "initialization code for the hardware...

CVE-2008-2735

The HTTP server in Cisco Adaptive Security Appliance ASA 5500 devices 8.0 before 8.0315 and 8.1 before 8.115, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service device reload via a URI in a crafted SSL or HT...

CVE-2008-2735

The HTTP server in Cisco Adaptive Security Appliance ASA 5500 devices 8.0 before 8.0315 and 8.1 before 8.115, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service device reload via a URI in a crafted SSL or HT...

CVE-2008-2733

Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service device reload via a craft...

CVE-2008-2734: Undefined Security Weakness

Memory leak in the crypto functionality in Cisco Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service memory consumption and VPN hang via a...

CVE-2008-2733: Undefined Security Weakness

Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service device reload via a craft...