The MeDoc Connection

This Post Authored by David Maynor, Aleksandar Nikolic, Matt Olney, and Yves YounanSummaryThe Nyetya attack was a destructive ransomware variant that affected many organizations inside of Ukraine and multinational corporations with operations in Ukraine. In cooperation with Cisco Advanced Service...

Russian Hackers Made 'Tainted Leaks' a Thing — Phishing to Propaganda

We came across so many revelations of sensitive government and corporate data on the Internet these days, but what's the accuracy of that information leaked by unknown actors? Security researchers have discovered new evidence of one such sophisticated global espionage and disinformation campaign...

CVE-2016-6368

CVE-2016-6368 describes a denial-of-service in Cisco Firepower System Software through improper input validation in the detection engine’s Pragmatic General Multicast (PGM) protocol decoding. A crafted PGM packet can cause the Snort process to restart, potentially bypassing traffic inspection or ...

CVE-2016-9209

A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to download files that would normally be blocked. Affected Products: The following Cisco products are vulnerable: Adaptive Security Appliance ASA 5500-X Series with FirePOWER...

Code injection

A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to download files that would normally be blocked. Affected Products: The following Cisco products are vulnerable: Adaptive Security Appliance ASA 5500-X Series with FirePOWER...

CVE-2016-9209

CVE-2016-9209 is a Cisco FirePOWER vulnerability where TCP processing mishandles out-of-order segments before HTTP inspection, causing GZIP decompression to bypass and malware-blocking checks. Affected: ASA 5500-X with FirePOWER, AMP for Networks 7000/8000, FirePOWER 7000/8000 series, FirePOWER T...

PT-2016-7705

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA 5500-X Series with FirePOWER Services version 2.9.7.10 Cisco Advanced Malware Protection AMP for Networks - 7000 Series Appliances version 2.9.7.10 Cisco Advanced Malware Protection AMP for Networks - 8000...

Cisco AsyncOS for Email Security Appliances MIME Header Processing Filter Bypass (cisco-sa-20161116-esa1 / cisco-sa-20161116-esa2)

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by an email filter bypass vulnerability in the email filtering functionality due to improper error handling when processing malformed Multipurpose Internet Mail Extension...

Updated clamav packages fix security vulnerability

ClamAV aka Clam AntiVirus before 0.99.2 allows remote attackers to cause a denial of service application crash via a crafted mew packer executable CVE-2016-1371. ClamAV aka Clam AntiVirus before 0.99.2 allows remote attackers to cause a denial of service application crash via a crafted 7z file...

CVE-2016-6463

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. This vulnerability affects all releases...

CVE-2016-6462

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. This vulnerability affects all releases...

Design/Logic Flaw

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. This vulnerability affects all releases...

Design/Logic Flaw

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. This vulnerability affects all releases...

CVE-2016-6463

CVE-2016-6463 affects Cisco AsyncOS for Cisco Email Security Appliances. The issue is in the MIME header processing/filter bypass that lets an unauthenticated, remote attacker bypass AMP filters when the AMP feature scans incoming attachments. Exploitation involves sending a crafted MIME-encoded ...

CVE-2016-6462

Cisco AsyncOS for Email Security Appliances contains a MIME Header Processing Filter Bypass vulnerability (CVE-2016-6462). The issue is in the email filtering functionality that can allow an unauthenticated, remote attacker to bypass AMP filters that are configured to scan incoming email attachme...

CVE-2016-6462

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. This vulnerability affects all releases...

CVE-2016-6463

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. This vulnerability affects all releases...

PT-2016-6935

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliances versions prior to 10.0.0-203 Cisco AsyncOS Software for Cisco Email Security Appliances versions prior to 9.7.2-131 Description A vulnerability in the email filtering functionality cou...

CVE-2016-6462: Improper Input Validation

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. This vulnerability affects all releases...

CVE-2016-6463: Improper Input Validation

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. This vulnerability affects all releases...