CVE-2015-4321

Cisco ASA uRPF Bypass (CVE-2015-4321) affects ASA 9.3(1.50–3) and 9.4(1). The issue arises when an IP address belongs to an internal interface and also appears in the routing table, allowing spoofed packets to bypass uRPF validation due to insufficient input validation. Impact is bypass of uRPF c...

PT-2015-1894 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.31.50 through 9.33 Cisco Adaptive Security Appliance ASA Software version 9.41 Description: The Unicast Reverse Path Forwarding uRPF implementation in Cisco Adaptive Security Appliance...

The vulnerability of Cisco Adaptive Security Appliance’s network firewall allows attackers to bypass the authentication process.

The vulnerability of the IKEv1 protocol implementation of the Cisco Adaptive Security Appliance is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures using specially crafted IKEv1 packets...

The vulnerability of Cisco Adaptive Security Appliance’s network firewall, which allows a hacker to trigger a service failure.

The vulnerability of the SNMP network firewall implementation of Cisco Adaptive Security Appliance is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending numerous SNMP requests remotely...

The vulnerability of Cisco Adaptive Security Appliance’s network firewall, which allows a hacker to trigger a service failure.

The vulnerability of Cisco Adaptive Security Appliance’s network interface layer is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service interruptions by sending specially crafted OSPFv2 packets...

Web Services Penetration Testing: WS-Attacker

WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum http://nds.rub.de/ and the Hackmanit GmbH http://hackmanit.de/ . The basic idea behind WS-Attacker is to provide a functionality to load WSDL...

CVE-2015-4458

The TLS implementation in the Cavium cryptographic-module firmware, as distributed with Cisco Adaptive Security Appliance ASA Software 9.15.21 and other products, does not verify the MAC field, which allows man-in-the-middle attackers to spoof TLS content by modifying packets, aka Bug ID CSCuu529...

Cisco Adaptive Security Appliance Software OSPFv2 Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First version 2 OSPFv2 code of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, adjacent attacker to cause the reload of the affected system. The vulnerability is due to improper handling of OSPFv2 packets. An attacker could...

Cisco Adaptive Security Appliance SNMP Denial of Service Vulnerability

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. A security vulnerability exists in the SNMP code of the Cisco Adaptive Security Appliance, which can be exploited by an...

Cisco Adaptive Security Appliance Software OSPFv2 Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First version 2 OSPFv2 code of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, adjacent attacker to cause the reload of the affected system. The vulnerability is due to improper handling of OSPFv2 packets. An attacker could...

PT-2015-1620 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.47 through 8.61.2 Description: The issue is related to the SNMP implementation and is caused by resource management errors. It allows a remote authenticated user to cause a denial of...

CVE-2015-4550

The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance ASA devices with software 9.33 and 9.41.1 does not verify the AES-GCM Integrity Check Value ICV octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, ak...

Design/Logic Flaw

SAP Adaptive Server Enterprise ASE before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism and obtain access to the probe account via a crafted response, aka SAP Security Note 2113995...

CVE-2014-6284

SAP Adaptive Server Enterprise ASE before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism and obtain access to the probe account via a crafted response, aka SAP Security Note 2113995...

Cisco Adaptive Security Appliance XAUTH Security Feature Bypass Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security feature bypass vulnerability exists in the Cisco Adaptive Security Appliance, which can be exploited by an authenticated remote attacker to bypass XAUTH...

SAP ASE Database Platform SQL Injection Vulnerability

SAP ASE Database Platform is a set of database management platform of Germany SAP SAP. A SQL injection vulnerability exists in SAP ASE Database Platform. A remote attacker could exploit this vulnerability to execute arbitrary SQL commands...

SAP Sybase Adaptive Server Enterprise SQL Injection Vulnerability

SAP Sybase Adaptive Server Enterprise is a relational database management system. A SQL injection vulnerability in SAP Sybase Adaptive Server Enterprise allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

SAP Sybase Adaptive Server Enterprise 'probe' login security bypass vulnerability

SAP Sybase Adaptive Server Enterprise ASE is a relational database management system from SAP. The system can be used in data-intensive environments and is characterized by high speed and stable performance. A security bypass vulnerability exists in SAP Sybase ASE. Due to an error in the...

Design/Logic Flaw

The XML parser in Cisco Adaptive Security Appliance ASA Software 8.4 before 8.47.28, 8.6 before 8.61.17, 9.0 before 9.04.33, 9.1 before 9.16, 9.2 before 9.23.4, and 9.3 before 9.33, when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a...

Cisco Adaptive Security Appliance (ASA) Software Remote Security Bypass Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability in the Cisco Adaptive Security Appliance validation code allows remote attackers to exploit the vulnerability to gain access to the resources of a...