Multiple vulnerabilities have been identified in Cisco ASA and PIX Security Appliances, which could be exploited by attackers to bypass security restrictions or cause a denial of service.
The first issue is caused by an error when processing malformed TCP ACK packets, which could be exploited to cause a denial of service.
The second vulnerability is caused by an error when processing malformed Transport Layer Security (TLS) packets, which could be exploited to cause a vulnerable device to reload, creating a denial of service condition.
The third issue is caused by an unspecified error in the Instant Messenger (IM) inspection engine, which could be exploited to cause a denial of service.
The fourth issue is caused by an error when handling port scans against port 443/TCP, which could be exploited to cause a vulnerable device to reload, creating a denial of service condition.
The fifth vulnerability is caused by an error where a control-plane ACL may not work after it is initially configured on the device, which could be exploited to bypass security restrictions.
