Vulnerabilities of Cisco PIX Software
Cisco PIX Software vulnerability: denial of service via CIFS
An attacker authenticated via Cisco ASA Clientless SSL VPN can access to several CIFS shares, to create a synchronization error, in order to trigger a denial of service.

Cisco PIX Software vulnerability: denial of service via CIFS UNC
An attacker can use a CIFS UNC (Universal Naming Convention) path, in order to stop Cisco ASA.

Cisco PIX Software vulnerability: memory leak via Clientless WebVPN
An authenticated attacker can use the Clientless WebVPN, to generate a memory leak in Cisco ASA, in order to progressively create a denial of service.

Cisco PIX Software vulnerability: HTTP Response Splitting
An attacker can alter the HTTP response of a service via "/+CSCOE+/logon.html", in order for example to inject JavaScript code.

Cisco PIX Software vulnerability: several vulnerabilities
Several vulnerabilities of Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module can be used by an attacker to create a denial of service or to bypass the authentication.

Display other vulnerabilities of Cisco PIX Software described by Vigil@nce...

Display information about Cisco PIX Software:

• http://www.cisco.com/en/US/products/ps6120/index.html