Cisco Email Security Appliance Anti-Spam Scanner Bypass Vulnerability

Last Update Date: 16 Jun 2015 10:30 Release Date: 16 Jun 2015 3420 Views

RISK: High Risk

TYPE: Security software and application - Security Software & Appliance

A vulnerability was identitied in the anti-spam scanner of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the anti-spam functionality of the ESA.

NOTE: There is no patch available for this vulnerability.

Impact

Security Restriction Bypass

System / Technologies affected

Cisco Email Security Appliance (ESA) 3.3 .1-09 | 7.6 .1-gpl-022 | 8.5 .6-074

Solutions

NOTE: Software updates are not available.

Vulnerability Identifier

CVE-2015-4184

Source

SecurityTracker
AusCERT
Cisco