Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Asa_5500
(Cisco)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 52 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2011-01-07 | CVE-2010-4677 | emWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (daemon crash) via a request for a document whose name contains space characters, aka Bug ID CSCsy08416. | 5500_series_adaptive_security_appliance, Adaptive_security_appliance_software, Asa_5500 | N/A | ||
2011-01-07 | CVE-2010-4678 | Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769. | 5500_series_adaptive_security_appliance, Adaptive_security_appliance_software, Asa_5500 | N/A | ||
2011-01-07 | CVE-2010-4681 | Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901. | 5500_series_adaptive_security_appliance, Adaptive_security_appliance_software, Asa_5500 | N/A | ||
2011-01-07 | CVE-2010-4679 | Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly handle Online Certificate Status Protocol (OCSP) connection failures, which allows remote OCSP responders to cause a denial of service (TCP socket exhaustion) by rejecting connection attempts, aka Bug ID CSCsz36816. | 5500_series_adaptive_security_appliance, Adaptive_security_appliance_software, Asa_5500 | N/A | ||
2011-01-07 | CVE-2010-4691 | Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742. | 5500_series_adaptive_security_appliance, Adaptive_security_appliance_software, Asa_5500 | N/A | ||
2011-01-07 | CVE-2010-4680 | The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777. | 5500_series_adaptive_security_appliance, Adaptive_security_appliance_software, Asa_5500 | N/A | ||
2011-01-07 | CVE-2010-4688 | Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) by making many SIP calls, aka Bug ID CSCte20030. | 5500_series_adaptive_security_appliance, Adaptive_security_appliance_software, Asa_5500 | N/A | ||
2011-01-07 | CVE-2010-4682 | Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (memory consumption) by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867. | 5500_series_adaptive_security_appliance, Adaptive_security_appliance_software, Asa_5500 | N/A | ||
2011-01-07 | CVE-2010-4689 | Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly preserve ACL behavior after a migration, which allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied, aka Bug ID CSCte46460. | 5500_series_adaptive_security_appliance, Adaptive_security_appliance_software, Asa_5500 | N/A | ||
2011-01-07 | CVE-2010-4690 | The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635. | 5500_series_adaptive_security_appliance, Adaptive_security_appliance_software, Asa_5500 | N/A |