Threat Outbreak Alert RuleID19278: Email Messages Distributing Malicious Software on November 9, 2015

Medium Alert ID: 42009 First Published: 2015 November 10 13:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19278 may contain the following files: Name |...

Cisco Email Security Appliance Email Scanner Denial of Service Vulnerability

A vulnerability in the email message filtering feature of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an ESA device to become unavailable due to a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text...

Cisco Email Security Appliance Default Credentials (HTTP)

The remote Cisco Email Security Appliance web interface is using known default credentials. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cisco Email Security Appliance (ESA) Detection Consolidation

Consolidation of Cisco Email Security Appliance ESA detections. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2015-07403)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. Cisco AsyncOS message filters are configured with a variety of rules that incorrectly process malformed fields. a remote attacker can construct attachments to special messag...

CVE-2015-6291

Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance ESA devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and...

CVE-2015-6291

CVE-2015-6291 affects Cisco AsyncOS on Email Security Appliance (ESA) devices. Root cause: improper input validation when filtering attachments (body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and attachment-dictionary-match), which can...

CVE-2015-6291

Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance ESA devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and...

CVE-2015-6321

Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance ESA devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Appliance SMA devices; and before 7.7.0-7...

CVE-2015-6321

Cisco AsyncOS contains a denial-of-service vulnerability (CVE-2015-6321) in the network stack triggered by a flood of TCP packets, leading to memory exhaustion and disruption of new TCP connections. Affected products include Cisco Email Security Appliance (ESA) on various 8.5.x–9.6.x branches, Ci...

Cisco Email Security Appliance AsyncOS TCP Flood Denial of Service Vulnerability

A vulnerability in the network stack of Cisco AsyncOS for Email Security Appliance could allow an unauthenticated, remote attacker to exhaust all available memory, preventing the affected device from accepting new TCP connections. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions...

Threat Outbreak Alert RuleID19199: Email Messages Distributing Malicious Software on November 5, 2015

Medium Alert ID: 41950 First Published: 2015 November 5 14:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19199 may contain the following files: Name |...

Cisco Email Security Appliance Email Scanner Denial of Service Vulnerability

A vulnerability in the email message filtering feature of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an ESA device to become unavailable due to a denial of service DoS condition. The vulnerability is due to improper input validati...

Threat Outbreak Alert RuleID19076: Email Messages Distributing Malicious Software on October 30, 2015

Medium Alert ID: 41812 First Published: 2015 October 30 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19076 may contain the following files: Name |...

Threat Outbreak Alert RuleID19000: Email Messages Distributing Malicious Software on October 27, 2015

Medium Alert ID: 41759 First Published: 2015 October 28 13:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19000 may contain the following files: Name |...

Threat Outbreak Alert RuleID18998: Email Messages Distributing Malicious Software on October 29, 2015

Medium Alert ID: 41752 First Published: 2015 October 27 13:48 GMT Last Updated: 2015 October 29 14:35 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18998...

Threat Outbreak Alert RuleID18849: Email Messages Distributing Malicious Software on October 22, 2015

Medium Alert ID: 41666 First Published: 2015 October 22 16:20 GMT Last Updated: 2015 October 23 12:56 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18849...

Threat Outbreak Alert RuleID18851: Email Messages Distributing Malicious Software on October 21, 2015

Medium Alert ID: 41630 First Published: 2015 October 21 13:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18851 may contain the following files: Name |...

Threat Outbreak Alert RuleID18772: Email Messages Distributing Malicious Software on October 16, 2015

Medium Alert ID: 41583 First Published: 2015 October 19 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18772 may contain the following files: Name |...

Cisco Email Security Appliance Format String Vulnerability

Cisco Email Security Appliance contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...