CVE-2008-2732: Undefined Security Weakness

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

CVE-2008-2735: Improper Input Validation

The HTTP server in Cisco Adaptive Security Appliance ASA 5500 devices 8.0 before 8.0315 and 8.1 before 8.115, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service device reload via a URI in a crafted SSL or HT...

CVE-2008-2736: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA 5500 devices 8.0315, 8.0316, 8.114, and 8.115, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames and passwords via unknown vectors, aka Bug ID CSCsq45636...

CVE-2008-2057

The Instant Messenger IM inspection engine in Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.24, 8.0.x before 8.0310, and 8.1.x before 8.112 allows remote attackers to cause a denial of service via a crafted packet...

CVE-2008-2055

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.1.x before 7.1270, 7.2.x before 7.24, and 8.0.x before 8.0310 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface...

CVE-2008-2057

The Instant Messenger IM inspection engine in Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.24, 8.0.x before 8.0310, and 8.1.x before 8.112 allows remote attackers to cause a denial of service via a crafted packet...

PT-2008-3576 · Cisco · Cisco Asa 5500 Series Adaptive Security Appliances +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance version 8.0.x before 8.039 Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances affected versions not specified Description: The issue allo...

CVE-2008-2055: Improper Input Validation

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.1.x before 7.1270, 7.2.x before 7.24, and 8.0.x before 8.0310 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface...

PT-2008-3575 · Cisco · Cisco Asa 5500 Series Adaptive Security Appliances +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 7.2.x through 7.231 Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 8.0.x through 8.0216 Description: The issue allows remote...

CVE-2008-2059: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors...

Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability Advisory ID: cisco-sa-20080123-asa http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtml Revision 1.0 For Public Release 2008 January 23 1600 UTC GMT...

Cisco PIX / Adaptive Security Appliance DoS

Crash on TTL processing if decrement-ttl enabled...

CVE-2008-0028: Undefined Security Weakness

Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance ASA before 7.236 and 8.03, when the Time-to-Live TTL decrement feature is enabled, allows remote attackers to cause a denial of service device reload via a crafted IP packet...

Command injection

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

CVE-2007-4786

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

CVE-2007-4786: Cleartext Transmission of Sensitive Information

Cisco Adaptive Security Appliance ASA running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog...

Cisco PIX / Adaptive Security Appliance firewalls multipls security vulnerabilities

LDAP authentication bypass. VPN connection and LDAP multiple denial of service...

Design/Logic Flaw

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

CVE-2007-2463

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.1 before 7.1249 and 7.2 before 7.2217 allows remote attackers to cause a denial of service device reload via unknown vectors related to VPN connection termination and password expiry...

CVE-2007-2462

CVE-2007-2462 affects Cisco ASA and PIX firewalls (ASA/PIX) running 7.2 prior to 7.2(2)8. The vulnerability allows remote attackers to bypass LDAP authentication and gain privileges when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, via unspecified vectors. Connected source...