Cisco ASA/PIX Appliances Fail to Properly Check Fragmented TCP Packets

Exploit for hardware platform in category dos / poc ====================================================================== Cisco ASA/PIX Appliances Fail to Properly Check Fragmented TCP Packets ====================================================================== The vulnerability affects the...

Cisco ASA/PIX - Appliances Fail to Properly Check Fragmented TCP Packets

The vulnerability affects the following Cisco ASA/PIX versions: Release Fixed in: -------- --------- 6.3 Not affected 7.0 7.08.6 7.1 7.12.81 7.2 7.24.30 8.0 8.04.28 8.1 8.12.19 8.2 8.20.230 ----------------------------- Triggering the vuln ------------------------------ /Utilize 1550 blocks on an...

CVE-2009-1155

Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.11 through 7.1282, 7.2 before 7.2427, 8.0 before 8.0425, and 8.1 before 8.1215, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establis...

CVE-2009-1160

Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.081, 7.1 before 7.1274, 7.2 before 7.249, and 8.0 before 8.045 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended...

CVE-2009-1156

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

CVE-2009-1158

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2426, 8.0 before 8.0424, and 8.1 before 8.1214, when H.323 inspection is enabled, allows remote attackers to cause a denial of service device reload via a...

CVE-2009-1159

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.2 before 7.2426, 8.0 before 8.0422, and 8.1 before 8.1212, when SQLNet inspection is enabled, allows remote attackers to cause a denial of service traceback and device reload via a series...

CVE-2009-1157

Memory leak on Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2430, 8.0 before 8.0428, and 8.1 before 8.1219 allows remote attackers to cause a denial of service memory consumption or device reload via a crafted TCP...

Code injection

Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.081, 7.1 before 7.1274, 7.2 before 7.249, and 8.0 before 8.045 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.2 before 7.2426, 8.0 before 8.0422, and 8.1 before 8.1212, when SQLNet inspection is enabled, allows remote attackers to cause a denial of service traceback and device reload via a series...

Authentication flaw

Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.11 through 7.1282, 7.2 before 7.2427, 8.0 before 8.0425, and 8.1 before 8.1215, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establis...

Design/Logic Flaw

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2426, 8.0 before 8.0424, and 8.1 before 8.1214, when H.323 inspection is enabled, allows remote attackers to cause a denial of service device reload via a...

Memory corruption

Memory leak on Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2430, 8.0 before 8.0428, and 8.1 before 8.1219 allows remote attackers to cause a denial of service memory consumption or device reload via a crafted TCP...

CVE-2009-1159

CVE-2009-1159 affects Cisco ASA 5500 Series and Cisco PIX Security Appliances; SQLNet inspection vulnerability can cause device reload via a series of SQL Net packets. Affected software versions: 7.2 (before 7.2(4)26), 8.0 (before 8.0(4)22), 8.1 (before 8.1(2)12). Exploitation requires a TCP thre...

CVE-2009-1158

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2426, 8.0 before 8.0424, and 8.1 before 8.1214, when H.323 inspection is enabled, allows remote attackers to cause a denial of service device reload via a...

CVE-2009-1158

Cisco ASA/PIX 5500 Series are affected by CVE-2009-1158 due to crafted H.323 packets causing device reloads when H.323 inspection is enabled. The vulnerability affects ASA/PIX software versions 7.0 up to 8.1 before specific fixed releases. The Security Advisory documents the first fixed releases ...

CVE-2009-1157

CVE-2009-1157 refers to a memory leak DoS on Cisco ASA 5500 Series and Cisco PIX after receiving crafted TCP packets. Affected software includes 7.x, 8.0, and 8.1 releases with memory exhaustion or device reload as the impact. The Cisco advisory assigns fixed releases: 7.2(4)30 (and 7.2 family), ...

CVE-2009-1160

Cisco ASA 5500 Series and PIX Security Appliances are affected by CVE-2009-1160 due to improper implementation of the implicit deny at the end of ACLs, allowing remote attackers to bypass access restrictions. The advisory covers multiple vulnerabilities, with the specific ACL bypass (Bug CSCsq912...

CVE-2009-1156

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 8.0 before 8.0425 and 8.1 before 8.1215, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service device reload via a crafted 1 SSL or 2 HTTP packet...

CVE-2009-1156

CVE-2009-1156 affects Cisco ASA 5500 Series devices running 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15 when SSL VPN or ASDM is configured. A crafted SSL or HTTP packet can cause a denial of service resulting in a device reload. Fixed releases are 8.0(4)28+ and 8.1(2)19+, respectively (earlier fi...