CVE-2010-0149

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.46, 8.0 before 8.04.38, 8.1 before 8.12.29, and 8.2 before 8.21.5; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service prevention of new connections via...

Code injection

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

CVE-2010-0149

CVE-2010-0149 affects Cisco ASA 5500 Series (and Cisco PIX 500) where remote attackers can trigger a TCP connection exhaustion DoS by sending crafted TCP segments during connection termination, leaving connections in CLOSEWAIT. Root cause is specific TCP segments that bypass normal termination ha...

CVE-2010-0150

CVE-2010-0150 affects Cisco ASA 5500 Series and Cisco PIX 500 Series, where malformed SIP messages sent to transit traffic can trigger a denial-of-service that reloads the device when SIP inspection is enabled. Cisco’s advisory ties this to two SIP-inspection DoS bugs (CSCsy91157 and CSCtc96018) ...

CVE-2010-0565

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10, allows remote attackers to cause a denial of service page fault and device reload via a malformed DTLS message, aka Bug ID CSCtb64913...

CVE-2010-0567

CVE-2010-0567 affects Cisco ASA 5500 Series and Cisco PIX 500 Series. A vulnerability in processing malformed IKE messages through an existing IPsec tunnel to UDP port 4500 can cause denial of service by tearing down all IPsec tunnels terminating on the device and prevent new tunnels from being e...

CVE-2010-0149

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.24.46, 8.0 before 8.04.38, 8.1 before 8.12.29, and 8.2 before 8.21.5; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service prevention of new connections via...

CVE-2010-0566

Cisco ASA 5500 Series Vulnerability (CVE-2010-0566): a crafted TCP segment can trigger a reload/DoS when a nailed static NAT and the inline Cisco AIP-SSM are used. Affected: ASA 7.0.x, 7.1.x, 7.2.x, 8.0.x, 8.1.x, 8.2.x. First fixed releases: 7.2(4.45), 8.0(4.44), 8.1(2.35), 8.2(1.10). Mitigation:...

CVE-2010-0568

CVE-2010-0568 describes an NTLMv1 authentication bypass vulnerability affecting Cisco ASA 5500 Series (and PIX 500 Series) where a crafted username can bypass NTLMv1 authentication. The issue is documented in Cisco’s advisory with multiple related vulnerabilities; for NTLMv1 specifically, fixed s...

CVE-2010-0569

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

CVE-2010-0567

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.1, 8.1 before 8.12.37, and 8.2 before 8.21.15; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service active IPsec tunn...

CVE-2010-0568

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.7, 8.1 before 8.12.40, and 8.2 before 8.22.1; and Cisco PIX 500 Series Security Appliance; allows remote attackers to bypass NTLMv1 authentication via a crafted...

CVE-2010-0569

CVE-2010-0569 is a Cisco ASA 5500 Series SIP Inspection DoS vulnerability. A malformed SIP message can trigger a reload of the appliance, affecting ASA versions 7.x, 8.0.x, 8.1.x and 8.2.x (including PIX 500). The Cisco advisory CSCsa-20100217-asa lists affected bug IDs CSCtc96018 among others an...

CVE-2010-0565

Cisco ASA 5500 Series is affected by CVE-2010-0565 via a WebVPN DTLS Denial of Service vulnerability. A malformed DTLS message sent to the DTLS port (default UDP 443) can cause a page fault and device reload when WebVPN and DTLS are enabled. Affected software versions include 7.2.x before 7.2(4.4...

CVE-2010-0150

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

CVE-2010-0566

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

Cisco Fixes Holes in Multiple Products

Cisco has released updates to close numerous security holes in several of its products. The ASA 5500 Adaptive Security Appliances are most affected. They alone contain six vulnerabilities that can be exploited to remotely cripple or reboot a device via specially crafted TCP, SIP, SCCP or IKE...

Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities. Security advisory, cisco-sa-20100217-fwsm, addresses a vulnerability in the Cisco Firewall Services Module FWSM for the Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers. Successful and repeated exploitation ...

CVE-2010-0440

Cross-site scripting XSS vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.21, 8.12.7, and 8.05; allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not...