http://www.cisco.com/en/US/products/products_security_advisories_listing.html Cisco Security Advisories (the 40 most recent advisories) en-us © 1992-2009 Cisco Systems, Inc. All rights reserved. 2009-06-27T02:00:00+00:00 news-at-cisco-rss@cisco.com news-at-cisco-rss@cisco.com Security Advisories hourly 1 1970-01-01T00:00+00:00 http://newsroom.cisco.com/images/mobile_newsAtCisco.png http://www.cisco.com/en/US/products/products_security_advisories_listing.html http://www.cisco.com/en/US/products/products_security_advisory09186a0080a96c0c.shtml A vulnerability exists in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software that can be exploited remotely to cause a reload of the Cisco IOS device<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+Software+Session+Initiation+Protocol+Denial+of+Service+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-27T02:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9648d.shtml Several features within Cisco IOS Software are affected by a crafted UDP packet vulnerability. If any of the affected features are enabled, a successful attack will result in a blocked input queue on the inbound interface. Only crafted UDP packets destined for the device could result in the interface being blocked, transit traffic will not block the interface. <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+Software+Multiple+Features+Crafted+UDP+Packet+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-27T02:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtml Cisco IOS software contains two vulnerabilities within the Cisco IOS WebVPN or Cisco IOS SSLVPN feature (SSLVPN) that can be remotely exploited without authentication to cause a denial of service condition. <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+Software+WebVPN+and+SSLVPN+Vulnerabilities" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-26T14:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904cb.shtml Cisco IOS? Software contains a vulnerability in multiple features that could allow an attacker to cause a denial of service (DoS) condition on the affected device. A sequence of specially crafted TCP packets can cause the vulnerable device to reload.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+Software+Multiple+Features+Crafted+TCP+Sequence+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-26T14:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c8.shtml The server side of the Secure Copy (SCP) implementation in Cisco IOS software contains a vulnerability that could allow authenticated users with an attached command-line interface (CLI) view to transfer files to and from a Cisco IOS device that is configured to be an SCP server, regardless of what users are authorized to do, per the CLI view configuration. This vulnerability could allow valid users to retrieve or write to any file on the device's file system, including the device's saved configuration and Cisco IOS image files, even if the CLI view attached to the user does not allow it. This configuration file may include passwords or other sensitive information. <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+Software+Secure+Copy+Privilege+Escalation+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-26T14:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a96478.shtml A vulnerability in the handling of IP sockets can cause devices to be vulnerable to a denial of service attack when any of several features of Cisco IOS? Software are enabled.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+Software+Multiple+Features+IP+Sockets+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-25T21:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml A series of TCP packets may cause a denial of service (DoS) condition on Cisco IOS devices that are configured as Easy VPN servers with the Cisco Tunneling Control Protocol (cTCP) encapsulation feature. Cisco has released free software updates that address this vulnerability. No workarounds are available; however, the IPSec NAT traversal (NAT-T) feature can be used as an alternative.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+cTCP+Denial+of+Service+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-25T21:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml Devices that are running Cisco IOS Software and configured for Mobile IP Network Address Translation (NAT) Traversal feature or Mobile IPv6 are vulnerable to a denial of service (DoS) attack that may result in a blocked interface. <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+Software+Mobile+IP+and+Mobile+IPv6+Vulnerabilities" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-25T21:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Vulnerabilities+in+Cisco+Video+Surveillance+Products" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-24T15:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8b.shtml <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+Physical+Access+Gateway+Denial+of+Service+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-24T15:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a008059e470.shtml A vulnerability exists in the IOS HTTP server in which HTML code inserted into dynamically generated output, such as the output from a show buffers command, will be passed to the browser requesting the page. This HTML code could be interpreted by the client browser and potentially execute malicious commands against the device or other possible cross-site scripting attacks. Successful exploitation of this vulnerability requires that a user browse a page containing dynamic content in which HTML commands have been injected.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=IOS+HTTP+Server+Command+Injection+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-06-19T19:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080ab7b56.shtml <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=CiscoWorks+TFTP+Directory+Traversal+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-05-20T14:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01491.shtml Two crafted Protocol Independent Multicast (PIM) packet vulnerabilities exist in Cisco IOS software that may lead to a denial of service (DoS) condition. Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Multiple+Multicast+Vulnerabilities+in+Cisco+IOS+Software" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS that can be exploited remotely to trigger a memory leak or to cause a reload of the IOS device.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Multiple+Cisco+IOS+Session+Initiation+Protocol+Denial+of+Service+Vulnerabilities" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ac.shtml Cisco IOS Software Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) is vulnerable to a Denial of Service (DoS) attack from specially crafted packets. Only the MFI is affected by this vulnerability. Older Label Forwarding Information Base (LFIB) implementation, which is replaced by MFI, is not affected.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+MPLS+Forwarding+Infrastructure+Denial+of+Service+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0146c.shtml A Cisco IOS device may crash while processing an SSL packet. This can happen during the termination of an SSL-based session. The offending packet is not malformed and is normally received as part of the packet exchange. <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Vulnerability+in+Cisco+IOS+While+Processing+SSL+Packet" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014b1.shtml Cisco uBR10012 series devices automatically enable Simple Network Management Protocol (SNMP) read/write access to the device if configured for linecard redundancy. This can be exploited by an attacker to gain complete control of the device. Only Cisco uBR10012 series devices that are <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+uBR10012+Series+Devices+SNMP+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01556.shtml The Cisco IOS Intrusion Prevention System (IPS) feature contains a vulnerability in the processing of certain IPS signatures that use the SERVICE.DNS engine. This vulnerability may cause a router to crash or hang, resulting in a denial of service condition.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+IPS+Denial+of+Service+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml A series of segmented Skinny Call Control Protocol (SCCP) messages may cause a Cisco IOS device that is configured with the Network Address Translation (NAT) SCCP Fragmentation Support feature to reload. <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+NAT+Skinny+Call+Control+Protocol+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml Cisco 10000, uBR10012 and uBR7200 series devices use a User Datagram Protocol (UDP) based Inter-Process Communication (IPC) channel that is externally reachable. An attacker could exploit this vulnerability to cause a denial of service (DoS) condition on affected devices. No other platforms are affected.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+10000,+uBR10012,+uBR7200+Series+Devices+IPC+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a01545.shtml Cisco IOS software configured for IOS firewall Application Inspection Control (AIC) with a HTTP configured application-specific policy are vulnerable to a Denial of Service when processing a specific malformed HTTP transit packet. Successful exploitation of the vulnerability may result in a reload of the affected device.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+Software+Firewall+Application+Inspection+Control+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014a9.shtml Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol Label Switching (MPLS) Virtual Private Networks (VPNs) or VPN Routing and Forwarding Lite (VRF Lite) and using Border Gateway Protocol (BGP) between Customer Edge (CE) and Provider Edge (PE) devices may permit information to propagate between VPNs. <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+MPLS+VPN+May+Leak+Information" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0157a.shtml A vulnerability exists in the Cisco IOS software implementation of Layer 2 Tunneling Protocol (L2TP), which affects limited Cisco IOS software releases.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+IOS+Software+Layer+2+Tunneling+Protocol+(L2TP)+Denial+of+Service+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-16T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Multiple+Vulnerabilities+in+Cisco+ASA+Adaptive+Security+Appliance+and+Cisco+PIX+Security+Appliances" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-13T17:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtml Cisco Unified Communications Manager, formerly Cisco Unified CallManager, contains two denial of service (DoS) vulnerabilities in the Session Initiation Protocol (SIP) service. An exploit of these vulnerabilities may cause an interruption in voice services.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+Unified+Communications+Manager+Session+Initiation+Protocol+Denial+of+Service+Vulnerabilities" border="0" height="0" width="0" /> Cisco Security Advisory 2009-04-09T14:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Multiple+Vulnerabilities+in+Cisco+Wireless+LAN+Controllers" border="0" height="0" width="0" /> Cisco Security Advisory 2009-03-11T18:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a8643c.shtml <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+Unified+Communications+Manager+IP+Phone+Personal+Address+Book+Synchronizer+Privilege+Escalation+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-03-11T15:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml The Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine Cisco ACE Module and Cisco ACE 4710 Application Control Engine contain multiple vulnerabilities that, if exploited, can result in any of the following impacts:<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Multiple+Vulnerabilities+in+the+Cisco+ACE+Application+Control+Engine+Module+and+Cisco+ACE+4710+Application+Control+Engine" border="0" height="0" width="0" /> Cisco Security Advisory 2009-03-09T20:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a80faa.shtml A denial of service (DoS) vulnerability exists in the Cisco Session Border Controller (SBC) for the Cisco 7600 series routers. Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available. <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+7600+Series+Router+Session+Border+Controller+Denial+of+Service+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-03-04T15:10:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc86.shtml Cisco Unified MeetingPlace Web Conferencing servers may contain an authentication bypass vulnerability that could allow an unauthenticated user to gain administrative access to the MeetingPlace application. Cisco has released free software updates that address this vulnerability.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+Unified+MeetingPlace+Web+Conferencing+Authentication+Bypass+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-02-25T15:10:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml Multiple vulnerabilities exist in the Cisco Application Networking Manager (ANM) and Cisco Application Control Engine (ACE) Device Manager applications. These vulnerabilities are independent of each other. Successful exploitation of these vulnerabilities may result in unauthorized system or host operating system access.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+ACE+Application+Control+Engine+Device+Manager+and+Application+Networking+Manager+Vulnerabilities" border="0" height="0" width="0" /> Cisco Security Advisory 2009-02-25T15:10:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.shtml Cisco Unified Communications Manager, formerly Cisco CallManager, contains a denial of service (DoS) vulnerability in the Certificate Authority Proxy Function (CAPF) service. Exploitation of this vulnerability could cause an interruption in voice services. The CAPF service is disabled by default.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+Unified+Communications+Manager+CAPF+Denial+of+Service+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-01-21T15:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml Cisco Security Manager contains a vulnerability when it is used with Cisco IPS Event Viewer (IEV) that results in open TCP ports on both the Cisco Security Manager server and IEV client. An unauthenticated, remote attacker could leverage this vulnerability to access the MySQL databases or IEV server.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+Security+Manager+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-01-21T15:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml The Cisco ONS 15300 series Edge Optical Transport Platform, the Cisco ONS 15454 Optical Transport Platform, the Cisco ONS 15454 SDH Multiservice Platform, and the Cisco ONS 15600 Multiservice Switching Platform contains a vulnerability when processing TCP traffic streams that may result in a reload of the device control card. <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+ONS+Platform+Crafted+Packet+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-01-14T15:50:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml IronPort PXE Encryption is an e-mail encryption solution that is designed to secure e-mail communications without the need for a Public Key Infrastructure (PKI) or special agents on receiving systems.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=IronPort+Encryption+Appliance+/+PostX+and+PXE+Encryption+Vulnerabilities" border="0" height="0" width="0" /> Cisco Security Advisory 2009-01-14T15:50:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a57481.shtml The Cisco Application Control Engine Global Site Selector (GSS) contains a vulnerability when processing specific Domain Name System (DNS) requests that may lead to a crash of the DNS service on the GSS.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Cisco+Global+Site+Selector+Appliances+DNS+Vulnerability" border="0" height="0" width="0" /> Cisco Security Advisory 2009-01-07T16:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Multiple+Vulnerabilities+in+Cisco+PIX+and+Cisco+ASA." border="0" height="0" width="0" /> Cisco Security Advisory 2008-10-22T12:00:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml A vulnerability exists in Cisco Unity that could allow an unauthenticated user to view or modify some of the configuration parameters of the Cisco Unity server. Cisco has released free software updates that address this vulnerability. A workaround that mitigates this vulnerability is available.<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Authentication+Bypass+in+Cisco+Unity" border="0" height="0" width="0" /> Cisco Security Advisory 2008-10-08T16:00:00+00:00 http://www.cisco.com/warp/customer/707/cisco-sa-20080708-dns.shtml <img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Multiple+Cisco+Products+Vulnerable+to+DNS+Cache+Poisoning+Attacks" border="0" height="0" width="0" /> Cisco Security Advisory 2008-09-09T21:30:00+00:00 http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtml Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances that may result in a reload of the device or disclosure of confidential information. This security advisory outlines details of the following vulnerabilities:<img src="http://www.cisco.com/swa/j/zag2_vs_log1.asc?Log=1&vs_f=Cisco+Security+Advisories&vs_p=Remote+Access+VPN+and+SIP+Vulnerabilities+in+Cisco+PIX+and+Cisco+ASA" border="0" height="0" width="0" /> Cisco Security Advisory 2008-09-03T14:20:00+00:00 searchPhrase http://www.cisco.com/pcgi-bin/search/search.pl