CVE-2009-5039

CVE-2009-5039 describes a memory leak in the H.323 implementation of Cisco IOS (function gk_circuit_info_do_in_acf) that can lead to denial of service via sustained, high-volume call traffic (IZCT test traffic). The cited Bug ID CSCsz72535 links the issue to Cisco IOS versions prior to 15.0(1)XA....

CVE-2010-4676

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote authenticated users to cause a denial of service device crash via a high volume of IPsec traffic, aka Bug ID CSCsx52748...

CVE-2010-4680

The WebVPN implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, ak...

CVE-2010-4671

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.24 and earlier allows remote attackers to cause a denial of service block exhaustion via multicast traffic, aka Bug ID CSCtg63992...

Memory corruption

Memory leak on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service memory consumption by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769...

Design/Logic Flaw

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS before 15.01XA5 allows remote attackers to cause a denial of service CPU consumption and device hang by sending many Router Advertisement RA messages with different source addresses, as demonstrated by the floodroute...

Code injection

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote authenticated users to cause a denial of service device crash via a high volume of IPsec traffic, aka Bug ID CSCsx52748...

Code injection

The Neighbor Discovery ND protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service CPU consumption and device hang by...

Cross site request forgery (csrf)

emWEB on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service daemon crash via a request for a document whose name contains space characters, aka Bug ID CSCsy08416...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier allow remote attackers to cause a denial of service block exhaustion via EIGRP traffic that triggers an EIGRP multicast storm, aka Bug ID CSCtf20269...

CVE-2010-4680

The CVE-2010-4680 affects Cisco ASA 5500 series WebVPN: prior to 8.2(3), CIFS shares could be viewed even when CIFS file browsing was disabled, allowing remote authenticated users to bypass access restrictions via CIFS requests (Bug CSCsz80777). Impact is high: attackers with network access can a...

CVE-2010-4671

The CVE-2010-4671 entry concerns Cisco IOS IPv6 Neighbor Discovery, where the ND implementation can be overwhelmed by a flood of Router Advertisements with spoofed sources, causing CPU exhaustion and device hang. Affected product: Cisco IOS pre-15.0(1)XA5. Trigger: RA flood using tools like flood...

CVE-2010-4670

The Neighbor Discovery ND protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service CPU consumption and device hang by...

CVE-2010-4675

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security...

CVE-2010-4677

emWEB on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service daemon crash via a request for a document whose name contains space characters, aka Bug ID CSCsy08416...

CVE-2010-4676

Cisco ASA 5500 series devices running software before 8.2(3) are affected by CVE-2010-4676. The issue allows remote authenticated users to cause a denial of service (device crash) by sending a high volume of IPsec traffic, identified as Bug ID CSCsx52748. The PT-2011-1631 entry confirms the vulne...

CVE-2010-4678

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769...

CVE-2010-4681

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901...