Cisco has issued an advisory regarding two vulnerabilities in Cisco PIX.

It is possible for an attacker to hijack a VPN connection if he can succesfully spoof a victims IP address and knows the peer authentication key (group pre-shared key or group password key).

Affected versions :
<6.0.4
<6.1.4
<6.2.1

Cisco PIX may crash and reload because of a buffer overflow when handling HTTP traffic for TACACS+ or RADIUS authentication.

Affected versions :
<5.2.9
<6.0.4
<6.1.4
<6.2.2

Upgrade to one of the following versions or never:
5.2.9
6.0.4
6.1.4
6.2.2

Upgrade info: cisco.com