CVE-2009-1202

WebVPN on the Cisco Adaptive Security Appliances ASA device with software 8.04, 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting XSS attacks, by modifying the first hex-encoded character i...

CVE-2009-1203: Undefined Security Weakness

WebVPN on the Cisco Adaptive Security Appliances ASA device with software 8.04, 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party 1 FTP and 2 CIFS servers, which makes it easier for remote attackers to trick a user into sending...

CVE-2009-1201: Improper Neutralization of Input During Web Page Generation

Eval injection vulnerability in the cscowrapjs function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances ASA device with software 8.04, 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting XSS attacks by setting CSCOWebVPN'process...

CVE-2009-1202: Improper Neutralization of Input During Web Page Generation

WebVPN on the Cisco Adaptive Security Appliances ASA device with software 8.04, 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting XSS attacks, by modifying the first hex-encoded character i...

Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5

Some TLS implementations handle errors processing RSA key exchanges and encryption PKCS 1 v1.5 messages in a broken way that leads an adaptive chosen-chiphertext attack. Attackers cannot recover a server's private key, but they can decrypt and sign messages with it. A strong oracle occurs when th...

Cisco Adaptive Security Appliance 8.x - Web VPN FTP or CIFS Authentication Form Phishing

Cisco Adaptive Security Appliance 8.x - Web VPN FTP or CIFS Authentication Form Phishing source: https://www.securityfocus.com/bid/35475/info Cisco Adaptive Security Appliance ASA is prone to a vulnerability that can aid in phishing attacks. An attacker can exploit this issue to display a fake...

Cisco Adaptive Security Appliance 8.x - Web VPN FTP or CIFS Authentication Form Phishing

source: https://www.securityfocus.com/bid/35475/info Cisco Adaptive Security Appliance ASA is prone to a vulnerability that can aid in phishing attacks. An attacker can exploit this issue to display a fake login window that's visually similar to the device's login window, which may mislead users...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances Advisory ID: cisco-sa-20090408-asa http://www.cisco.com/warp/public/707/cisco-sa-20090408-asa.shtml Revision 1.0 For Public...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

CVE-2009-1156: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

CVE-2009-1157: Undefined Security Weakness

Memory leak on Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2430, 8.0 before 8.0428, and 8.1 before 8.1219 allows remote attackers to cause a denial of service memory consumption or device reload via a crafted TCP...

CVE-2009-1220

Cross-site scripting XSS vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances ASA 5520 with software 7.2430 and earlier 7.2 versions including 7.2222, and 8.0428 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject...

CVE-2009-1220: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances ASA 5520 with software 7.2430 and earlier 7.2 versions including 7.2222, and 8.0428 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject...

CVE-2008-6373

CVE-2008-6373 affects Nagios core prior to 3.0.6. The vulnerability is described as unspecified, with remote attack vectors tied to CGI programs, “adaptive external commands,” and the ability to write newlines and submit service comments. Public sources in connected documents confirm affected pro...

CVE-2008-6373: Improper Control of Generation of Code

Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI programs, "adaptive external commands," and "writing newlines and submitting service comments."...

Sybase ASA Default Database Password (TCP) - Active Check

The remote Sybase SQL Anywhere / Adaptive Server Anywhere server uses default credentials SPDX-FileCopyrightText: 2008 David Lodge Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2008-3816

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.249 and 7.2410 allows remote attackers to cause a denial of service device reload via a crafted IPv6 packet...

CVE-2008-3817

Memory leak in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 8.0 before 8.04 and 8.1 before 8.12 allows remote attackers to cause a denial of service memory consumption via an unspecified sequence of packets, related to the "initialization code for the hardware...

CVE-2008-3817: Undefined Security Weakness

Memory leak in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 8.0 before 8.04 and 8.1 before 8.12 allows remote attackers to cause a denial of service memory consumption via an unspecified sequence of packets, related to the "initialization code for the hardware...

CVE-2008-3815: Improper Authentication

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.083, 7.1 before 7.1278, 7.2 before 7.2416, 8.0 before 8.046, and 8.1 before 8.1113, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote...