CVE-2012-5415

CVE-2012-5415 is a race condition affecting Cisco Adaptive Security Appliances (ASA) where an attacker can trigger denial of service (CPU consumption or device reload) by opening multiple connections. The issue arises from improper handling of hash lookups for secondary flows (Bug IDs CSCue31622 ...

PT-2013-2960 · Cisco · Cisco Firewall Services Module +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices affected versions not specified Cisco Firewall Services Module FWSM affected versions not specified Description: The Secure Shell SSH implementation does not properly terminate sessions, allowing...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.28, 8.1 and 8.2 before 8.25.35, 8.3 before 8.32.34, 8.4 before 8.44.11, 8.6 before 8.61.10, and 8.7 before 8.71.3, and Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.224.1 and 4.0 a...

PT-2013-2919 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices with software versions prior to 7.25.10 Cisco Adaptive Security Appliances ASA devices with software versions 8.0 prior to 8.05.31 Cisco Adaptive Security Appliances ASA devices with software...

PT-2013-2917 · Cisco · Cisco Firewall Services Module +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices versions 7.x through 7.25.9 Cisco Adaptive Security Appliances ASA devices versions 8.0 through 8.05.27 Cisco Adaptive Security Appliances ASA devices versions 8.1 through 8.25.34 Cisco Adaptive...

Cisco Adaptive Security Appliance Xlates Table Exhaustion Vulnerability

Cisco Adaptive Security Appliance ASA Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to the improper implementation of the Network Address Translation NAT process by the affected software...

CVE-2013-1138

CVE-2013-1138 concerns Cisco ASA devices where the NAT process can be abused by unauthenticated, remote attackers sending crafted packets to exhaust the connections-table memory, causing a DoS. The vulnerability (Bug ID CSCue46386) affects Cisco ASA software and is described as a NAT handling fla...

Cisco ASA 1000V Cloud Firewall H.323 Inspection Denial of Service Vulnerability

A vulnerability in Cisco Adaptive Security Appliance ASA Software for the Cisco ASA 1000V Cloud Firewall may cause the Cisco ASA 1000V to reload after processing a malformed H.323 message. Cisco ASA 1000V Cloud Firewall is affected when H.323 inspection is enabled. Cisco has released software...

Sybase Fixes Nine ASE Flaws

Enterprise software and services company Sybase has again patched holes in its Adaptive Server Enterprise ASE product, fixing a handful of database vulnerabilities that could have allowed a hacker to execute code and bypass security parameters on the company’s main database server product. As...

ESA-2012-054: RSA ® Adaptive Authentication (On-Premise) Cross-Site Scripting Vulnerabilities

ESA-2012-054.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-054: RSA ® Adaptive Authentication On-Premise Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2012-054 CVE Identifier: CVE-2012-4611 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected...

RSA Adaptive Authentication crossite scripting

No description provided...

CVE-2012-4611

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Adaptive Authentication On-Premise AAOP before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Adaptive Authentication On-Premise AAOP before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4643

The DHCP server on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 7.0 before 7.25.8, 7.1 before 7.25.8, 7.2 before 7.25.8, 8.0 before 8.05.28, 8.1 before 8.12.56, 8.2 before 8.25.27, 8.3 before...

Authentication flaw

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.30 and 8.3 before 8.32.34 allows remote attackers to cause a denial of...

SAP's Sybase RDMS Patches Fail to Repair 10 Critical Vulnerabilities

Patches released this week by database and mobile management vendor Sybase did not completely repair serious privilege escalation and remote code execution vulnerabilities in versions 15.0.3 and later of its Adaptive Server Enterprise ASE product. Researchers at Application Security Inc., which...

ESA-2012-035: RSAR Adaptive Authentication (On-Premise) Information Disclosure Vulnerability

ESA-2012-035.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-035: RSA® Adaptive Authentication On-Premise Information Disclosure Vulnerability EMC Identifier: ESA-2012-035 CVE Identifier: CVE-2012-2286 Severity Rating: CVSS v2 Base Score: 7.9 AV:A/AC:M/Au:N/C:C/I:C/A:C Affected Product...

RSA Adaptive Authentication information leakage

No description provided...

Code injection

Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-2286

CVE-2012-2286 affects RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 prior to SP3 P3. The issue is described as an information disclosure vulnerability that could occur when calling specific components within the application. The connected advisory (ESA-2012-035) notes a fix in SP3 P3 for ...