CVE-2011-0396

CVE-2011-0396 affects Cisco ASA 5500 Series devices with ASA software versions 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13). When a Certificate Authority (CA) is configured, remote attackers could read arbitrary files via unspecified vectors. This vuln...

CVE-2010-2816

CVE-2010-2816 is a Cisco ASA 5500 Series DoS vulnerability in the SIP inspection feature. An unauthenticated, network-scoped attacker can trigger a device reload by sending crafted SIP packets. Affected software versions are ASA 5500 Series with 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2...

CVE-2010-2815

CVE-2010-2815 affects Cisco ASA 5500 Series and PIX 500 series TLS/SSL processing. A DoS can be triggered by a sequence of crafted TLS packets, causing a device reload. Affected software versions and fixed releases are documented in Cisco PSIRT: upgrade to 7.2(5) or later for 7.2.x, 8.0(5.15) or ...

CVE-2009-4912

CVE-2009-4912 (Cisco ASA 5580) affects ASA 5580 series with software before 8.1(2). The issue allows an SSL handshake with an HTTPS client that is unauthorized to complete, potentially bypassing intended access restrictions during an HTTPS session (Bug ID CSCso10876). The cited details indicate t...

CVE-2009-4918

CVE-2009-4918 affects Cisco ASA 5580 series devices running software before 8.1(2). The issue allows remote attackers to trigger a denial of service by sending malformed NAT-T packets, causing the IKE process to hang. Root cause is tied to Bug ID CSCsr74439. The available information indicates th...

CVE-2010-2817

CVE-2010-2817 concerns an unspecified DoS vulnerability in the IKE implementation of Cisco ASA 5500-series devices (and Cisco PIX 500-series) that can cause a device reload via a crafted IKE message. Connected documents confirm affected software ranges and fixed versions: ASA 7.0 up to 7.0(8.11);...

CVE-2011-0395

Cisco ASA 5500 Series devices are affected by CVE-2011-0395 when RIP is enabled together with the Cisco Phone Proxy feature. The issue allows remote attackers to trigger a denial of service (device reload) via crafted RIP updates. Affected software versions include 8.0 before 8.0(5.20), 8.1 befor...

CVE-2010-2814

CVE-2010-2814 affects Cisco ASA 5500 Series (and PIX 500) TLS implementation. A sequence of crafted TLS packets can trigger a denial of service, causing the device to reload (unavailability). Reported as Bug CSCtf37506. Affected software and fixed releases per sources: 7.2.x before 7.2(5) → upgra...

CVE-2009-4915

CVE-2009-4915 affects Cisco ASA 5580 series devices running software prior to 8.1(2). The issue allows remote attackers to cause a denial of service (device reload) via unknown network traffic, demonstrated by a connection stress test (Bug CSCsq68451). Connected documents corroborate the same des...

CVE-2008-7257

Cisco ASA WebVPN (WebVPN on ASA) is affected by a CRLF injection/HTTP response splitting vulnerability tracked as CVE-2008-7257. The flaw occurs in +webvpn+/index.html for ASA 5580-series devices with software before 8.1(2). An attacker can craft a URL containing %0d%0a sequences to inject arbitr...

CVE-2009-4917

Cisco ASA 5580 series devices running software before 8.1(2) are affected by CVE-2009-4917, a vulnerability that allows remote attackers to cause a denial of service (device reload) by sending a high volume of SIP traffic (Bug ID CSCsr65901). The issue is described as an unspecified vulnerability...

CVE-2009-4919

The CVE-2009-4919 issue affects Cisco ASA 5580 series devices. It is a buffer overflow in the IKE attribute handling that allows remote attackers to cause an unspecified impact. Root cause is an overflow triggered by long IKE attributes, referenced to Bug ID CSCsu43121. Mitigation is to upgrade t...

CVE-2009-4922

Cisco ASA 5580 series devices running software before 8.1(2) are affected by CVE-2009-4922. The issue enables remote authenticated users to trigger a denial of service (traceback) by establishing numerous IPsec L2L tunnels from remote peer IP addresses (Bug ID CSCso15583). Affected component/vers...

CVE-2009-4910

CVE-2009-4910 is an XSS vulnerability in the WebVPN portal of Cisco ASA 5580 series devices running software before 8.1(2) (Bug ID CSCsq78418). It allows remote attackers to inject arbitrary web script/HTML via unspecified vectors. Documented impact is limited to the browser-based context; no exp...

CVE-2009-4913

Cisco ASA 5580 series devices running software before 8.1(2) have an IPv6 implementation issue (Bug CSCso58622) that exposes IP services on the far side of the box, potentially allowing remote attackers to bypass access restrictions via IPv6 packets. Affected product/component: Cisco ASA 5580; vu...

CVE-2009-4916

The CVE-2009-4916 vulnerability affects Cisco ASA 5580 series devices running software before 8.1(2). The issue, tied to Bug CSCsq80095, is an unspecified flaw that allows remote authenticated users to trigger a denial of service by performing a login action during failover replication, causing a...

CVE-2009-4923

Cisco ASA 5580 series devices running software before 8.1(2) are affected by an unspecified vulnerability in the DTLS implementation that allows remote attackers to cause a denial-of-service (traceback) via TLS fragments (Bug ID CSCso53162). The issue is documented across multiple feeds (NVD/Red ...

CVE-2009-4920

Cisco ASA 5580 series devices running software 8.1(2) are affected by CVE-2009-4920. The vulnerability (unspecified in the sources) allows remote attackers to cause a denial of service (watchdog traceback) by sending a large amount of small-packet data. Impact is noted as a complete availability ...

CVE-2009-4914

CVE-2009-4914 affects Cisco ASA 5580 series with software before 8.1(2). The vulnerability is a memory leak in the handling of Subject Alternative Name fields in X.509 certificates that may be exploited by remote attackers to cause a DoS via memory exhaustion. Connected docs consistently describe...

CVE-2009-4911

CVE-2009-4911 affects Cisco ASA 5580 series devices running software before 8.1(2). The vulnerability allows remote attackers to trigger a denial-of-service (device crash) through SSL VPN and PPPoE transaction vectors (Bug ID CSCsm77958). Affected component/condition: ASA 5580 with older software...

CVE-2009-4921

CVE-2009-4921 affects Cisco ASA 5580 series devices running software prior to 8.1(2). The issue allows remote attackers to trigger a denial of service (traceback) by sending malformed TCP packets, identified as Bug ID CSCsm84110. Public references in the provided documents confirm the affected pr...