CVE-2012-5586: Undefined Security Weakness

The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via vectors related to the "user index method" and "the path to the user resource."...

CVE-2012-4643

The DHCP server on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 7.0 before 7.25.8, 7.1 before 7.25.8, 7.2 before 7.25.8, 8.0 before 8.05.28, 8.1 before 8.12.56, 8.2 before 8.25.27, 8.3 before...

Authentication flaw

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.30 and 8.3 before 8.32.34 allows remote attackers to cause a denial of...

Code injection

The DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.13 and the Firewall Services Module FWSM 4.1 before 4.17 in...

Stack overflow

Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.34, 8.4 before 8.44.4, 8.5 before 8.51.13, and 8.6 before 8.61.3 and th...

CVE-2012-4643: Undefined Security Weakness

The DHCP server on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 7.0 before 7.25.8, 7.1 before 7.25.8, 7.2 before 7.25.8, 8.0 before 8.05.28, 8.1 before 8.12.56, 8.2 before 8.25.27, 8.3 before...

CVE-2012-4660: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SIP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.17, 8.3 before 8.32.28, 8.4 before 8.42.13, 8.5 before 8.51.4, and 8.6 before 8.61.5 allows remote...

CVE-2012-4659: Improper Authentication

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.30 and 8.3 before 8.32.34 allows remote attackers to cause a denial of...

CVE-2012-4663: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.13 and the Firewall Services Module FWSM 4.1 before 4.17 in...

Cisco Patches a Rash of Buffer Overflow and DoS Vulnerabilities

Cisco Systems released fixes for 15 vulnerabilities in three of its major product lines on Wednesday, including two different security appliances. The vulnerabilities would either allow an attacker to remotely execute code on a compromised machine, or execute a denial-of-service attack. Cisco sai...

PT-2012-5527 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices versions 7.0 through 7.25.7 Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services...

PT-2012-5532 · Cisco · Cisco Asa Services Module +3

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 before 8.32.25 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.4 before 8.42.5 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8...

CVE-2012-3058: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.4 before 8.44.1, 8.5 before 8.51.11, and 8.6 before 8.61.3 allow remote attackers to cause a denial of service device reload via IPv6 transit traffi...

PT-2012-4462 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.4 before 8.44.1 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.5 before 8.51.11 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8...

CVE-2012-0355: Improper Input Validation

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.4 before 8.42.11 and 8.5 before 8.51.4 allow remote attackers to cause a denial of service device reload via 1 IPv4 or 2 IPv6 packets that trigger...

CVE-2012-0353: Improper Input Validation

The UDP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.0 before 8.05.25, 8.1 before 8.12.50, 8.2 before 8.25.5, 8.3 before 8.32.22, 8.4 before 8.42.1, and 8.5 before 8.51.2...

CVE-2012-0356: Improper Input Validation

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.25.7, 8.0 before 8.05.27, 8.1 before 8.12.53, 8.2 before 8.25.8, 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.2...

Cisco Firewall Services Module Crafted Protocol Independent Multicast Message Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

PT-2012-2517 · Cisco · Cisco Asa Services Module +3

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.0 through 7.2 before 7.25.7 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 before 8.05.27 Cisco Adaptive Security Appliances ASA 5500 series device...

PT-2012-2515 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices versions 8.0 through 8.2 before 8.25.20 Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA...