CVE-2015-0577

Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...

CVE-2015-0577

Cisco AsyncOS ISQ (IronPort Spam Quarantine) XSS: multiple vulnerabilities in the ISQ web page on ESA/SMA due to insufficient input validation, enabling remote attackers to inject arbitrary script/HTML via unspecified parameters. Root cause: input validation gaps in the web page. Impact: cross-si...

Threat Outbreak Alert RuleID13083: Email Messages Distributing Malicious Software on January 12, 2015

Medium Alert ID: 36985 First Published: 2015 January 13 15:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13083 may contain the following files: Name |...

Threat Outbreak Alert RuleID12969: Email Messages Distributing Malicious Software on December 24, 2014

Medium Alert ID: 36890 First Published: 2015 January 5 15:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12969 may contain the following files: Name |...

CVE-2004-2771

CVE-2004-2771 affects mailx (Heirloom mailx <=12.5 and BSD mailx <=8.1.2). The vulnerability arises from parsing of email addresses, allowing a local attacker to cause mailx to execute arbitrary shell commands via shell metacharacters in the address. Several connected records corroborate im...

CVE-2014-8016

The Cisco IronPort Email Security Appliance ESA allows remote attackers to cause a denial of service CPU consumption via long Subject headers in e-mail messages, aka Bug ID CSCzv93864...

Code injection

The Cisco IronPort Email Security Appliance ESA allows remote attackers to cause a denial of service CPU consumption via long Subject headers in e-mail messages, aka Bug ID CSCzv93864...

CVE-2014-8016

The Cisco IronPort Email Security Appliance ESA allows remote attackers to cause a denial of service CPU consumption via long Subject headers in e-mail messages, aka Bug ID CSCzv93864...

CVE-2014-8016

Cisco IronPort Email Security Appliance (ESA) Subject header length processing vulnerability (CVE-2014-8016) allows an unauthenticated remote attacker to cause high CPU utilization and potential DoS by sending crafted emails with long Subject headers. The issue stems from unbounded Subject header...

CVE-2014-6319

CVE-2014-6319 affects Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 plus CU6. The root cause is improper validation of tokens in requests, enabling remote attackers to spoof the origin of e‑mail messages. Documented affected versions align with MS14-075 guida...

Threat Outbreak Alert RuleID12728: Email Messages Distributing Malicious Software on December 7, 2014

Medium Alert ID: 36681 First Published: 2014 December 8 16:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12728 may contain the following files: Name |...

Cybercrime Group Preys on Wall Street Insider Information

A criminal hacking group with an innate understanding of how Wall Street moves and what influences stock prices has found a soft spot in more than 100 publicly traded companies and is stealing, among other data, mergers and acquisitions intelligence. The group is homed in on healthcare and...

CVE-2014-5314

CVE-2014-5314 maps to a buffer overflow in Cybozu Office, Cybozu Mailwise and Cybozu Dezie that allows remote authenticated users to execute arbitrary code via email messages. OpenVAS entries and JVN/CVE references confirm affected product families and versions: Cybozu Office up to 10.0.x (pre-10...

Threat Outbreak Alert RuleID12491: Email Messages Distributing Malicious Software on November 19, 2014

Medium Alert ID: 36471 First Published: 2014 November 19 20:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12491 may contain the following files: Name |...

Threat Outbreak Alert RuleID12478: Email Messages Distributing Malicious Software on November 18, 2014

Medium Alert ID: 36452 First Published: 2014 November 18 16:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12478 may contain the following files: Name |...

Cisco Email Security Appliance Telnet Remote Code Execution (cisco-sa-20120126-ironport)

According to its self-reported version, the version of AsyncOS running on the remote Cisco Email Security Appliance ESA is affected by a remote code execution vulnerability due to a buffer overflow condition in the telnet component. C Tenable Network Security, Inc. include"compat.inc"; if...

Threat Outbreak Alert RuleID12362: Email Messages Distributing Malicious Software on November 11, 2014

Medium Alert ID: 36385 First Published: 2014 November 11 15:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12362 may contain the following files: Name |...

Smartphone Owners Lack Motivation to Adequately Lock Devices

A quarter of smartphone owners don’t lock their devices because they don’t believe they have any data worth protecting. Even more refrain from doing it because they feel like it’s too much of a hassle. That’s at least according to a new study carried out by six researchers, four from the Universi...

Threat Outbreak Alert RuleID12185: Email Messages Distributing Malicious Software on October 30, 2014

Medium Alert ID: 36235 First Published: 2014 October 30 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12185 may contain the following files: Name |...

Cisco Email Security Appliance ZIP File Filter Bypass

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by a security bypass vulnerability in which the ZIP inspection engine of AsyncOS does not properly analyze files, thus allowing a remote, unauthenticated attacker to...