CVE-2014-3410

Cisco ASA Software’s syslog-management subsystem has a vulnerability (CVE-2014-3410) where an unauthenticated, remote attacker can obtain the administrator password during a copy operation by sniffing network traffic or reading syslog messages on a server. Root cause: improper sanitization of sys...