cisco firewall services module 2.3 vulnerabilities and exploits

(subscribe to this query)

9

CVSSv2

Unspecified vulnerability in Cisco Firewall Services Module (FWSM) prior to 2.3(4.7) and 3.x prior to 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections.

Cisco Firewall Services Module 2.3 Cisco Firewall Services Module 3.1

7.8

CVSSv2

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 prior to 7.0(4.14) and 7.1 prior to 7.1(2.1), and the FWSM 2.x prior to 2.3(4.12) and 3.x prior to 3.1(3.24), when "inspect http" is enabled, allows remote malicious users to cause a denial of service (device reb...

Cisco Firewall Services Module 2.3 Cisco Firewall Services Module 3.1 Cisco Pix Firewall Software 7.1 Cisco Asa 5500 7.0 Cisco Asa 5500 7.1 Cisco Pix Firewall Software 7.0

7.8

CVSSv2

The Cisco Firewall Services Module (FWSM) 2.x, 3.1 prior to 3.1(16), 3.2 prior to 3.2(13), and 4.0 prior to 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote malicious users to cause a denial of service (traffic-handling outage) via a series of malforme...

Cisco Firewall Services Module 2.1 \\(0.208\\)Cisco Firewall Services Module 2.3 Cisco Firewall Services Module 3.2\\(2\\)Cisco Firewall Services Module 3.2\\(3\\)Cisco Firewall Services Module 2.3\\(1\\)Cisco Firewall Services Module 3.1 Cisco Firewall Services Module 4.0 Cisco Firewall Services Module 4.0\\(4\\)Cisco Firewall Services Module 3.2 Cisco Firewall Services Module 3.2\\(1\\)Cisco Firewall Services Module 3.1\\(5\\)Cisco Firewall Services Module 3.1\\(6\\)Cisco Firewall Services Module 2.2\\(1\\)Cisco Firewall Services Module 2.2

7.5

CVSSv2

Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and previous versions, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs).

Cisco Firewall Services Module

5

CVSSv2

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshak...

5

CVSSv2

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

5

CVSSv2

Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote malicious users to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suit...

Cisco Firewall Services Module Cisco Firewall Services Module 1.1.3 Cisco Firewall Services Module 1.1.2 Cisco Firewall Services Module 1.1 \\(3.005\\)Cisco Firewall Services Module 2.1 \\(0.208\\)Cisco Vpn 3000 Concentrator Series Software 2.5.2.b Cisco Vpn 3000 Concentrator Series Software 2.5.2.c Cisco Vpn 3000 Concentrator Series Software 2.5.2.d Cisco Vpn 3000 Concentrator Series Software 2.5.2.f Cisco Vpn 3000 Concentrator Series Software 3.0 Cisco Vpn 3000 Concentrator Series Software 3.5.2 Cisco Vpn 3000 Concentrator Series Software 3.5.3 Cisco Vpn 3000 Concentrator Series Software 3.5.4 Cisco Vpn 3000 Concentrator Series Software 3.5.5 Cisco Vpn 3000 Concentrator Series Software 4.1.5.b Cisco Vpn 3000 Concentrator Series Software 4.1.7.a Cisco Vpn 3000 Concentrator Series Software 4.1.7.b Cisco Vpn 3000 Concentrator Series Software 4.7.1 Cisco Vpn 3000 Concentrator Series Software 4.7.1.f Cisco Vpn 3000 Concentrator Series Software 3.1 Cisco Vpn 3000 Concentrator Series Software 3.1\\(rel\\)Cisco Vpn 3000 Concentrator Series Software 3.1.1

7.8

CVSSv2

The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote malicious users to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the adviso...

Checkpoint Vpn-1 Ngx R60 Checkpoint Vpn-1 Firewall-1 Next Generation R54 Checkpoint Check Point Checkpoint Vpn-1 Firewall-1 Next Generation R55w Checkpoint Vpn-1 Firewall-1 Next Generation R55 Checkpoint Vpn-1 Firewall-1 Next Generation R55p Checkpoint Express Ci R57 Checkpoint Firewall-1 3.0

7.5

CVSSv2

Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products, allows remote malicious users to cause a denial of service and possibly execute ...

Symantec Enterprise Firewall 8.0 Symantec Gateway Security 5300 1.0 Symantec Gateway Security 5310 1.0 Symantec Firewall Vpn Appliance 100 Symantec Gateway Security 5400 2.0.1 Symantec Firewall Vpn Appliance 200 Symantec Gateway Security 300 2.0 Symantec Gateway Security 400 2.0 Symantec Gateway Security 5000 Series 3.0 Symantec Gateway Security 5100

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook