CVE-2009-1157

CVE-2009-1157 refers to a memory leak DoS on Cisco ASA 5500 Series and Cisco PIX after receiving crafted TCP packets. Affected software includes 7.x, 8.0, and 8.1 releases with memory exhaustion or device reload as the impact. The Cisco advisory assigns fixed releases: 7.2(4)30 (and 7.2 family), ...

CVE-2009-1155

Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.11 through 7.1282, 7.2 before 7.2427, 8.0 before 8.0425, and 8.1 before 8.1215, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establis...

CVE-2009-1159

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.2 before 7.2426, 8.0 before 8.0422, and 8.1 before 8.1212, when SQLNet inspection is enabled, allows remote attackers to cause a denial of service traceback and device reload via a series...

CVE-2009-1155

Cisco ASA 5500 Series and Cisco PIX Security Appliances are affected by CVE-2009-1155. When the override-account-disable feature is enabled in tunnel-group general-attributes, remote attackers can bypass authentication and establish a VPN session to the ASA/PIX via unspecified vectors. Affected s...

Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2008-3815

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.083, 7.1 before 7.1278, 7.2 before 7.2416, 8.0 before 8.046, and 8.1 before 8.1113, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote...

CVE-2008-3817

Memory leak in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 8.0 before 8.04 and 8.1 before 8.12 allows remote attackers to cause a denial of service memory consumption via an unspecified sequence of packets, related to the "initialization code for the hardware...

Code injection

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.249 and 7.2410 allows remote attackers to cause a denial of service device reload via a crafted IPv6 packet...

Memory corruption

Memory leak in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 8.0 before 8.04 and 8.1 before 8.12 allows remote attackers to cause a denial of service memory consumption via an unspecified sequence of packets, related to the "initialization code for the hardware...

Authentication flaw

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.083, 7.1 before 7.1278, 7.2 before 7.2416, 8.0 before 8.046, and 8.1 before 8.1113, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote...

CVE-2008-3817

Memory leak in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 8.0 before 8.04 and 8.1 before 8.12 allows remote attackers to cause a denial of service memory consumption via an unspecified sequence of packets, related to the "initialization code for the hardware...

CVE-2008-3816

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.249 and 7.2410 allows remote attackers to cause a denial of service device reload via a crafted IPv6 packet...

CVE-2008-3816

CVE-2008-3816 is a denial-of-service vulnerability in Cisco ASA 5500 Series and Cisco PIX Security Appliances (versions 7.2(4)9/10) where specially crafted IPv6 packets destined to the device can cause a reload. The issue is triggered when IPv6 is configured on devices with these releases; IPv6 t...

CVE-2008-3815

CVE-2008-3815 affects Cisco ASA/PIX devices (5500 series) when VPNs are configured with Windows NT Domain authentication. The vulnerability allows remote attackers to bypass VPN authentication via unknown vectors. Affected software versions and first fixed releases are: 7.0 before 7.0(8)3; 7.1 be...

CVE-2008-3817

Memory leak in Cisco ASA 5500 Series and Cisco PIX (software 8.0 before 8.0(4) and 8.1 before 8.1(2)) triggered by the hardware crypto accelerator initialization code can be exploited by a crafted sequence of packets to cause a DoS via memory exhaustion. The issue is specific to crypto accelerato...

CVE-2008-3815

Unspecified vulnerability in Cisco Adaptive Security Appliances ASA 5500 Series and PIX Security Appliances 7.0 before 7.083, 7.1 before 7.1278, 7.2 before 7.2416, 8.0 before 8.046, and 8.1 before 8.1113, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote...

Cisco PIX / ASA multiple security vulnerabilities

Windows NT domain authentication bypass, IPv6 DoS, DoS because of memory leak in crypto accelerator...

Cisco PIX及ASA设备IPv6拒绝服务漏洞

BUGTRAQ ID: 31863 CVECAN ID: CVE-2008-3816 PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备（ASA）是可提供安全和VPN服务的模块化平台。 特制的IPv6报文可能导致支持IPv6的Cisco ASA和Cisco PIX安全设备重载。仅有发送到设备而不是经过设备的报文才可以触发这个漏洞，这些报文必须发送给配置了IPv6的接口。 Cisco PIX/ASA 7.2 临时解决方法： 使用no ipv6 address接口子命令禁止处理IPv6报文。 厂商补丁： Cisco -----...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA Advisory ID: cisco-sa-20081022-asa http://www.cisco.com/warp/public/707/cisco-sa-20081022-asa.shtml Revision 1.0 For Public Release 2008 October 22 1600 UTC GMT Summary =====...

Cisco PIX/ASA Windows NT域绕过认证漏洞

BUGTRAQ ID: 31864 CVECAN ID: CVE-2008-3815 PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备（ASA）是可提供安全和VPN服务的模块化平台。 由于Microsoft Windows NT域认证问题，Cisco ASA和Cisco PIX设备可能受VPN绕过认证漏洞的影响。配置了基于IPSec或SSL远程访问VPN的Cisco ASA或Cisco PIX安全设备存在这个漏洞，攻击者可以通过远程访问基于IPSec或SSL的VPN成功连接到Cisco ASA设备。 Cisco ASA或Cisco...