CVE-2008-2732

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

CVE-2008-2734

CVE-2008-2734 arises from a memory leak in the crypto subsystem of Cisco ASA 5500 series when configured as a clientless SSL VPN endpoint. The affected versions are ASA 7.2 before 7.2(4)2, ASA 8.0 before 8.0(3)14, and ASA 8.1 before 8.1(1)4. A crafted SSL or HTTP packet can cause memory consumpti...

CVE-2008-2736

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA 5500 devices 8.0315, 8.0316, 8.114, and 8.115, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames and passwords via unknown vectors, aka Bug ID CSCsq45636...

CVE-2008-2732

CVE-2008-2732 covers multiple erroneous SIP processing vulnerabilities in Cisco PIX and ASA (5500 series) that may cause device reloads via SIP inspection. Affected software versions include Cisco PIX/ASA releases prior to 7.0(7)16, 7.1 prior to 7.1(2)71, 7.2 prior to 7.2(4)7, 8.0 prior to 8.0(3)...

Cisco PIX and Cisco ASA multiple security vulnerabilities

Multiple DoS conditions on SIP parsing and VPN authentication, memory leaks, information leak...

Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA Advisory ID: cisco-sa-20080903-asa Revision 1.0 For Public Release 2008 September 3 1600 UTC GMT...

Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA Document ID: 105444 Advisory ID: cisco-sa-20080604-asa http://www.cisco.com/warp/public/707/cisco-sa-20080604-asa.shtml Revision 1.0 For Public Release 2008 June 04 1600 UTC...

Cisco PIX / ASA multiple security vulnerabilities

TCP ACKs DoS, TLS DoS, instant messenger DoS, HTTPs request parsing DoS, Control-plane ACLs feature bypass...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors...

CVE-2008-2055

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.1.x before 7.1270, 7.2.x before 7.24, and 8.0.x before 8.0310 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface...

CVE-2008-2058

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.232 and 8.0.x before 8.0217 allows remote attackers to cause a denial of service device reload via a port scan against TCP port 443 on the device...

CVE-2008-2059

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.1.x before 7.1270, 7.2.x before 7.24, and 8.0.x before 8.0310 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface...

CVE-2008-2056

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 and 8.1.x before 8.111 allows remote attackers to cause a denial of service device reload via a crafted Transport Layer Security TLS packet to the device interface...

Design/Logic Flaw

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 and 8.1.x before 8.111 allows remote attackers to cause a denial of service device reload via a crafted Transport Layer Security TLS packet to the device interface...

CVE-2008-2056

The CVE-2008-2056 issue affects Cisco ASA/PIX security appliances (ASA 5500 series) where a crafted TLS packet sent to the device interface can cause a DoS (device reload). Affected: 8.0.x before 8.0(3)9 and 8.1.x before 8.1(1)1. Remediation: upgrade to 8.0(3)9 or later (8.0.x) or 8.1(1)1 or late...

CVE-2008-2056

Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 8.0.x before 8.039 and 8.1.x before 8.111 allows remote attackers to cause a denial of service device reload via a crafted Transport Layer Security TLS packet to the device interface...

CVE-2008-2059

Cisco ASA/PIX security appliances with software version 8.0.x before 8.0(3)9 are vulnerable to CVE-2008-2059, a control-plane ACL bypass vulnerability. The advisory describes multiple independent issues and, for this CVE, enabling bypass via unknown vectors could allow malicious traffic to reach ...

CVE-2008-2057

CVE-2008-2057 covers a denial-of-service vulnerability in the Instant Messenger (IM) inspection engine of Cisco ASA/PIX devices. A crafted packet can trigger a DoS condition on affected appliances. The entry explicitly maps to Cisco advisories documenting an IM inspection vulnerability (CVE-2008-...