Threat Outbreak Alert RuleID13745: Email Messages Distributing Malicious Software on February 26, 2015

Medium Alert ID: 37619 First Published: 2015 February 27 15:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13745 may contain the following files: Name |...

Cisco AsyncOS Web Framework Input Validation Vulnerability

Cisco AsyncOS on Email Security Appliance ESA and so on are products of Cisco USA.Cisco ESA is a set of email security appliances.Cisco Content SMA is a set of content security management appliances.Cisco AsyncOS is a set of operating systems used in these products. Cisco Web Security Appliance i...

Threat Outbreak Alert RuleID13734: Email Messages Distributing Malicious Software on February 26, 2015

Medium Alert ID: 37604 First Published: 2015 February 26 18:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13734 may contain the following files: Name |...

Threat Outbreak Alert RuleID13709: Email Messages Distributing Malicious Software on February 25, 2015

Medium Alert ID: 37580 First Published: 2015 February 25 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13709 may contain the following files: Name |...

CVE-2015-0624

The web framework in Cisco AsyncOS on Email Security Appliance ESA, Content Security Management Appliance SMA, and Web Security Appliance WSA devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630, CSCur89636, CSCur89633, and...

CVE-2015-0624

Cisco AsyncOS web framework on ESA, SMA, and WSA is vulnerable to an HTTP header injection flaw due to insufficient validation of header values (notably Host/X-Forwarded-Host). A remote attacker can trigger redirects to arbitrary URLs by sending crafted HTTP headers, potentially aided by publicly...

CVE-2015-1574

The Google Email App for Android (4.2.2.0200) is vulnerable to a remote denial-of-service caused by improper handling of the Content-Disposition header. A crafted email can crash the app without user interaction. A PoC exploit exists; newer 4.2.2.0400+ versions are not affected. Affected devices ...

Threat Outbreak Alert RuleID13474: Email Messages Distributing Malicious Software on February 9, 2015

Medium Alert ID: 37399 First Published: 2015 February 9 20:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13474 may contain the following files: Name |...

CVE-2015-0605

The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance ESA devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343...

Code injection

The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance ESA devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343...

CVE-2015-0605

The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance ESA devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343...

CVE-2015-0605

Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices prior to 8.6 (8.5 and earlier) contains a vulnerability in the uuencode inspection engine that can bypass content restrictions via a crafted uuencoded email attachment. Root cause: improper decoding logic for uuencoded content in the i...

Cisco AsyncOS Software Uuencoded Email Filtering Bypass Vulnerability

A vulnerability in the uuencode inspection engine of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass engine protection and deliver a malicious file as an email attachment. The vulnerability is due to improper implementation of the log...

Threat Outbreak Alert RuleID13412: Email Messages Distributing Malicious Software on February 4, 2015

Medium Alert ID: 37353 First Published: 2015 February 5 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13412 may contain the following files: Name |...

Threat Outbreak Alert RuleID13303: Email Messages Distributing Malicious Software on January 28, 2015

Medium Alert ID: 37204 First Published: 2015 January 28 19:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13303 may contain the following files: Name |...

Threat Outbreak Alert RuleID13265: Email Messages Distributing Malicious Software on January 26, 2015

Medium Alert ID: 37157 First Published: 2015 January 26 16:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13265 may contain the following files: Name |...

Threat Outbreak Alert RuleID13252: Email Messages Distributing Malicious Software on January 23, 2015

Medium Alert ID: 37145 First Published: 2015 January 26 16:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13252 may contain the following files: Name |...

Threat Outbreak Alert RuleID13162: Email Messages Distributing Malicious Software on January 20, 2015

Medium Alert ID: 37061 First Published: 2015 January 20 17:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13162 may contain the following files: Name |...

Threat Outbreak Alert RuleID13139: Email Messages Distributing Malicious Software on January 15, 2015

Medium Alert ID: 37033 First Published: 2015 January 16 17:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13139 may contain the following files: Name |...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...