Cisco AsyncOS Security Bypass Vulnerability

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A security vulnerability exists in Cisco AsyncOS that could be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Cisco Email Security Appliance Malformed DGN File Attachment Denial of Service Vulnerability

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the message filtering feature of...

Cisco AsyncOS for Email and Web Security Appliances Remote Security Bypass Vulnerability

Cisco AsyncOS for Email and Web Security Appliances are both products of Cisco, Inc.Cisco AsyncOS for Email Security Appliances is a set of operating systems used in the Email Security Appliance ESA of Cisco, Inc.Cisco Web Security Appliance WSA is a set of Web security appliances. Cisco AsyncOS...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2016-10394)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A remote denial of service vulnerability exists in Cisco AsyncOS, which can be exploited by an unauthenticated, remote attacker to cause a denial of service condition...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2016-10393)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A remote denial of service vulnerability exists in Cisco AsyncOS, which can be exploited by an unauthenticated, remote attacker to cause a denial of service on an affected...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2016-10395)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A remote denial of service vulnerability exists in Cisco AsyncOS 9.7.1 and later versions, which can be exploited by an unauthenticated, remote attacker to cause a denial of...

Cisco AsyncOS Security Bypass Vulnerability (CNVD-2016-10397)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A remote security bypass vulnerability exists in Cisco AsyncOS, where an unauthenticated, remote attacker bypasses a user's configuration on the appliance and performs an...

Cisco Email Security Appliance MIME Header Bypass Vulnerability

A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions MIME headers of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass the filtering...

Cisco Email Security Appliance Malformed MIME Header Vulnerability

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to...

Cisco Email Security Appliance Drop Bypass Vulnerability

A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass a configured drop filter by using an email with a corrupted attachment. The vulnerability is due t...

Cisco Email and Web Security Appliance Malformed MIME Header Vulnerability

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to...

Cisco Email and Web Security Appliance MIME Header Bypass Vulnerability

A vulnerability in the email filtering for malformed Multipurpose Internet Mail Extensions MIME headers of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass the filtering functionality of the...

Cisco Email Security Appliance Advanced Malware Protection Attachment Scanning Denial of Service Vulnerability

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

CVE-2016-6416

The FTP service in Cisco AsyncOS on Email Security Appliance ESA devices 9.6.0-000 through 9.9.6-026, Web Security Appliance WSA devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance SMA devices allows remote attackers to cause a denial of service via a flood of FTP...

Code injection

The FTP service in Cisco AsyncOS on Email Security Appliance ESA devices 9.6.0-000 through 9.9.6-026, Web Security Appliance WSA devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance SMA devices allows remote attackers to cause a denial of service via a flood of FTP...

CVE-2016-6416

The FTP service in Cisco AsyncOS on Email Security Appliance ESA devices 9.6.0-000 through 9.9.6-026, Web Security Appliance WSA devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance SMA devices allows remote attackers to cause a denial of service via a flood of FTP...

CVE-2016-6416

The CVE-2016-6416 issue affects Cisco AsyncOS on ESA, WSA, and SMA devices. The local FTP service could be flooded by remote attackers, causing DoS due to lack of throttling. Affected versions include ESA 9.6.0-000 through 9.9.6-026, WSA 9.0.0-162 through 9.5.0-444, and SMA in the same family. Ro...

CVE-2016-6416: Improper Restriction of Operations within the Bounds of a Memory Buffer

The FTP service in Cisco AsyncOS on Email Security Appliance ESA devices 9.6.0-000 through 9.9.6-026, Web Security Appliance WSA devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance SMA devices allows remote attackers to cause a denial of service via a flood of FTP...

Cisco Content Security Management Appliance File Transfer Protocol Denial of Service Vulnerability (cisco-sa-20160928-aos)

A vulnerability in the local File Transfer Protocol FTP service on the Cisco AsyncOS for Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...

Cisco AsyncOS File Transfer Protocol Denial of Service Vulnerability

A vulnerability in the local File Transfer Protocol FTP service on the Cisco AsyncOS for Email Security Appliance ESA, Web Security Appliance WSA, and Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The...