Code injection

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.249 and 7.2410 allows remote attackers to cause a denial of service device reload via a crafted IPv6 packet...

Memory corruption

Memory leak in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 8.0 before 8.04 and 8.1 before 8.12 allows remote attackers to cause a denial of service memory consumption via an unspecified sequence of packets, related to the "initialization code for the hardware...

CVE-2008-3816

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.249 and 7.2410 allows remote attackers to cause a denial of service device reload via a crafted IPv6 packet...

CVE-2008-3815

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.083, 7.1 before 7.1278, 7.2 before 7.2416, 8.0 before 8.046, and 8.1 before 8.1113, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote...

CVE-2008-3816

CVE-2008-3816 is a denial-of-service vulnerability in Cisco ASA 5500 Series and Cisco PIX Security Appliances (versions 7.2(4)9/10) where specially crafted IPv6 packets destined to the device can cause a reload. The issue is triggered when IPv6 is configured on devices with these releases; IPv6 t...

CVE-2008-3815

CVE-2008-3815 affects Cisco ASA/PIX devices (5500 series) when VPNs are configured with Windows NT Domain authentication. The vulnerability allows remote attackers to bypass VPN authentication via unknown vectors. Affected software versions and first fixed releases are: 7.0 before 7.0(8)3; 7.1 be...

CVE-2008-3817

Memory leak in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 8.0 before 8.04 and 8.1 before 8.12 allows remote attackers to cause a denial of service memory consumption via an unspecified sequence of packets, related to the "initialization code for the hardware...

CVE-2008-3817

Memory leak in Cisco ASA 5500 Series and Cisco PIX (software 8.0 before 8.0(4) and 8.1 before 8.1(2)) triggered by the hardware crypto accelerator initialization code can be exploited by a crafted sequence of packets to cause a DoS via memory exhaustion. The issue is specific to crypto accelerato...

Cisco PIX / ASA multiple security vulnerabilities

Windows NT domain authentication bypass, IPv6 DoS, DoS because of memory leak in crypto accelerator...

Cisco PIX/ASA Windows NT域绕过认证漏洞

BUGTRAQ ID: 31864 CVECAN ID: CVE-2008-3815 PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备（ASA）是可提供安全和VPN服务的模块化平台。 由于Microsoft Windows NT域认证问题，Cisco ASA和Cisco PIX设备可能受VPN绕过认证漏洞的影响。配置了基于IPSec或SSL远程访问VPN的Cisco ASA或Cisco PIX安全设备存在这个漏洞，攻击者可以通过远程访问基于IPSec或SSL的VPN成功连接到Cisco ASA设备。 Cisco ASA或Cisco...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA Advisory ID: cisco-sa-20081022-asa http://www.cisco.com/warp/public/707/cisco-sa-20081022-asa.shtml Revision 1.0 For Public Release 2008 October 22 1600 UTC GMT Summary =====...

Cisco PIX及ASA设备IPv6拒绝服务漏洞

BUGTRAQ ID: 31863 CVECAN ID: CVE-2008-3816 PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备（ASA）是可提供安全和VPN服务的模块化平台。 特制的IPv6报文可能导致支持IPv6的Cisco ASA和Cisco PIX安全设备重载。仅有发送到设备而不是经过设备的报文才可以触发这个漏洞，这些报文必须发送给配置了IPv6的接口。 Cisco PIX/ASA 7.2 临时解决方法： 使用no ipv6 address接口子命令禁止处理IPv6报文。 厂商补丁： Cisco -----...

Multiple Vulnerabilities in Cisco PIX and Cisco ASA

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco PIX和Cisco ASA多个拒绝服务和信息泄漏漏洞

发布时间：2008-09-04 录入：启明星辰 BUGTRAQ ID: 30998 CVE ID：CVE-2008-2732 CVE-2008-2733 CVE-2008-2734 CVE-2008-2735 CVE-2008-2736 CNCVE ID：CNCVE-20082732 CNCVE-20082733 CNCVE-20082734 CNCVE-20082735 CNCVE-20082736 Cisco PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；Cisco ASA是一款可提供安全和VPN服务的模块化平台。 Cisco PIX和Cisco...

CVE-2008-2733

Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service device reload via a craft...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

Authentication flaw

Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.2 before 7.242, 8.0 before 8.0314, and 8.1 before 8.114, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service device reload via a craft...

CVE-2008-2732

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

CVE-2008-2732

CVE-2008-2732 covers multiple erroneous SIP processing vulnerabilities in Cisco PIX and ASA (5500 series) that may cause device reloads via SIP inspection. Affected software versions include Cisco PIX/ASA releases prior to 7.0(7)16, 7.1 prior to 7.1(2)71, 7.2 prior to 7.2(4)7, 8.0 prior to 8.0(3)...

CVE-2008-2733

CVE-2008-2733 affects Cisco PIX/ASA 5500 series when configured as a client VPN endpoint, allowing a remote attacker to cause a device reload (denial of service) via crafted IPSec client authentication. Affected software includes 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4. Ci...