Code injection

Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-2286

CVE-2012-2286 affects RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 prior to SP3 P3. The issue is described as an information disclosure vulnerability that could occur when calling specific components within the application. The connected advisory (ESA-2012-035) notes a fix in SP3 P3 for ...

CVE-2012-2286

Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 before SP3 P3 allows remote attackers to obtain sensitive information via unknown vectors...

PT-2012-5532 · Cisco · Cisco Asa Services Module +3

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 before 8.32.25 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.4 before 8.42.5 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8...

PT-2012-5527 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices versions 7.0 through 7.25.7 Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services...

PT-2012-5530 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.2 through 8.25.16 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 through 8.32.27 Cisco Adaptive Security Appliances ASA 5500 series devices version...

openssl: CMS and PKCS#7 Bleichenbacher attack

The implementation of Cryptographic Message Syntax CMS and PKCS 7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack MMA adaptive chosen ciphertext...

openssl: CMS and PKCS#7 Bleichenbacher attack

The implementation of Cryptographic Message Syntax CMS and PKCS 7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack MMA adaptive chosen ciphertext...

openssl: CMS and PKCS#7 Bleichenbacher attack

The implementation of Cryptographic Message Syntax CMS and PKCS 7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack MMA adaptive chosen ciphertext...

PT-2012-4058 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.2 through 8.4 Description: The issue allows remote attackers to cause a denial of service via crafted SIP traffic when SIP inspection is enabled. This is due to the creatio...

Code injection

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.4 before 8.44.1, 8.5 before 8.51.11, and 8.6 before 8.61.3 allow remote attackers to cause a denial of service device reload via IPv6 transit traffi...

PT-2012-4462 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.4 before 8.44.1 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.5 before 8.51.11 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8...

UI Randomization, Statistical Analysis Could End Clickjacking

A PayPal researcher argues in a new paper that a combination of randomized user interfaces and back end screenshot comparison tools could effectively put an end to clickjacking attacks, one of the most prevalent online scams. Brad Hill of Paypal argues in a new paper for a method he calls “adapti...

Cisco ASA 5500 Series Adaptive Security Appliance Cut-Through Proxy Authentication Information Disclosure Vulnerability

Cisco ASA 5500 Series Adaptive Security Appliance firmware contains a vulnerability that could allow an unauthenticated, remote attacker to access sensitive information on a targeted system. The vulnerability is due to improper proxy authentication during attempts to cut through a targeted system...

Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)

This host is installed with Cisco Adaptive Security Appliance and is prone to activeX control remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbmsvpnactivexcontrolcodeexecvuln.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft VPN ActiveX Control Remote Code Execution Vulnerabili...

Microsoft VPN ActiveX Control Remote Code Execution Vulnerability (2695962)

Cisco Adaptive Security Appliance is prone to ActiveX control remote code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PT-2012-2532 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 through 8.4 Description: The issue allows remote attackers to cause a denial of service by triggering a large number of stale connections, resulting in an incorrect value...

PT-2012-1682 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 through 8.4 Description: A CRLF injection issue exists in the /+CSCOE+/logon.html endpoint, allowing remote attackers to inject arbitrary HTTP headers and conduct HTTP...

PT-2012-2509 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.2 through 8.4 Description: The issue allows remote attackers to obtain sensitive information via a connection attempt due to improper proxy authentication during attempts t...

FreeBSD Ports: openssl

The remote host is missing an update to the system as announced in the referenced advisory. VID 60eb344e-6eb1-11e1-8ad7-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID 60eb344e-6eb1-11e1-8ad7-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...