CVE-2009-4455

The CVE affects Cisco ASA 5500 Series Adaptive Security Appliance (ASAs) with default configurations across software versions 7.0–8.2. The issue allows portal traffic to reach arbitrary backend servers, potentially letting remote authenticated users bypass intended access restrictions and reach u...

CVE-2009-1160

Cisco ASA 5500 Series and PIX Security Appliances are affected by CVE-2009-1160 due to improper implementation of the implicit deny at the end of ACLs, allowing remote attackers to bypass access restrictions. The advisory covers multiple vulnerabilities, with the specific ACL bypass (Bug CSCsq912...

CVE-2009-1157

CVE-2009-1157 refers to a memory leak DoS on Cisco ASA 5500 Series and Cisco PIX after receiving crafted TCP packets. Affected software includes 7.x, 8.0, and 8.1 releases with memory exhaustion or device reload as the impact. The Cisco advisory assigns fixed releases: 7.2(4)30 (and 7.2 family), ...

CVE-2009-1159

CVE-2009-1159 affects Cisco ASA 5500 Series and Cisco PIX Security Appliances; SQLNet inspection vulnerability can cause device reload via a series of SQL Net packets. Affected software versions: 7.2 (before 7.2(4)26), 8.0 (before 8.0(4)22), 8.1 (before 8.1(2)12). Exploitation requires a TCP thre...

CVE-2009-1155

Cisco ASA 5500 Series and Cisco PIX Security Appliances are affected by CVE-2009-1155. When the override-account-disable feature is enabled in tunnel-group general-attributes, remote attackers can bypass authentication and establish a VPN session to the ASA/PIX via unspecified vectors. Affected s...

CVE-2009-1156

CVE-2009-1156 affects Cisco ASA 5500 Series devices running 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15 when SSL VPN or ASDM is configured. A crafted SSL or HTTP packet can cause a denial of service resulting in a device reload. Fixed releases are 8.0(4)28+ and 8.1(2)19+, respectively (earlier fi...

CVE-2009-1158

Cisco ASA/PIX 5500 Series are affected by CVE-2009-1158 due to crafted H.323 packets causing device reloads when H.323 inspection is enabled. The vulnerability affects ASA/PIX software versions 7.0 up to 8.1 before specific fixed releases. The Security Advisory documents the first fixed releases ...

CVE-2008-2733

CVE-2008-2733 affects Cisco PIX/ASA 5500 series when configured as a client VPN endpoint, allowing a remote attacker to cause a device reload (denial of service) via crafted IPSec client authentication. Affected software includes 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4. Ci...

CVE-2008-2736

CVE-2008-2736 affects Cisco ASA 5500 series and PIX/ASA devices enabling clientless SSL VPN; vulnerability allows an attacker to obtain usernames and passwords via clientless VPN connections. Affected versions include ASA 5500 software 8.0(3)15, 8.0(3)16, 8.1(1)4, and 8.1(1)5. Root cause relates ...

CVE-2008-2735

CVE-2008-2735 affects Cisco ASA/PIX SSL VPN implementations. The URI Processing Error Vulnerability in SSL VPNs allows a remote attacker to trigger a denial-of-service (device reload) by crafting SSL/HTTP packets when clientless SSL VPN is configured. Affected software includes ASA/PIX 8.0 before...

CVE-2008-2732

CVE-2008-2732 covers multiple erroneous SIP processing vulnerabilities in Cisco PIX and ASA (5500 series) that may cause device reloads via SIP inspection. Affected software versions include Cisco PIX/ASA releases prior to 7.0(7)16, 7.1 prior to 7.1(2)71, 7.2 prior to 7.2(4)7, 8.0 prior to 8.0(3)...

CVE-2008-2734

CVE-2008-2734 arises from a memory leak in the crypto subsystem of Cisco ASA 5500 series when configured as a clientless SSL VPN endpoint. The affected versions are ASA 7.2 before 7.2(4)2, ASA 8.0 before 8.0(3)14, and ASA 8.1 before 8.1(1)4. A crafted SSL or HTTP packet can cause memory consumpti...