CVE-2012-4662: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.13 and the Firewall Services Module FWSM 4.1 before 4.17 in...

CVE-2012-4661: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.34, 8.4 before 8.44.4, 8.5 before 8.51.13, and 8.6 before 8.61.3 and th...

CVE-2012-4660: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SIP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.17, 8.3 before 8.32.28, 8.4 before 8.42.13, 8.5 before 8.51.4, and 8.6 before 8.61.5 allows remote...

PT-2012-5531 · Cisco · Cisco Asa Services Module +3

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 through 8.32.33 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.4 through 8.44.3 Cisco Adaptive Security Appliances ASA 5500 series devices versions...

CVE-2012-0387

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit HTTP traffic, aka Bug ID CSCtq36153...

Design/Logic Flaw

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit HTTP traffic, aka Bug ID CSCtq36153...

CVE-2012-0387

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit HTTP traffic, aka Bug ID CSCtq36153...

CVE-2012-0387: Undefined Security Weakness

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit HTTP traffic, aka Bug ID CSCtq36153...

PT-2012-2534

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4, 15.0, 15.1, and 15.2 Description The issue is related to a memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall, allowing remote attackers to cause a denial of service via crafted transit HTTP...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Advisory ID: cisco-sa-20120314-asa Revision 1.0 For Public Release 2012 March 14 16:00 UTC GMT...

CVE-2012-0353: Improper Input Validation

The UDP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.5, 8.3 before 8.32.22, 8.4 before 8.42.1, and 8.5 before 8.51.2...

CVE-2008-2057

The Instant Messenger IM inspection engine in Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.24, 8.0.x before 8.0310, and 8.1.x before 8.112 allows remote attackers to cause a denial of service via a crafted packet...

CVE-2008-2057

CVE-2008-2057 covers a denial-of-service vulnerability in the Instant Messenger (IM) inspection engine of Cisco ASA/PIX devices. A crafted packet can trigger a DoS condition on affected appliances. The entry explicitly maps to Cisco advisories documenting an IM inspection vulnerability (CVE-2008-...

CVE-2008-2057: Undefined Security Weakness

The Instant Messenger IM inspection engine in Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.24, 8.0.x before 8.0310, and 8.1.x before 8.112 allows remote attackers to cause a denial of service via a crafted packet...