Threat Outbreak Alert: Fake Pharmaceutical Advertisement Email Messages on March 23, 2014

Medium Alert ID: 33475 First Published: 2014 March 24 15:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a pharmaceutical advertisement notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Draft Attachment Email Messages on March 21, 2014

Medium Alert ID: 33469 First Published: 2014 March 24 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a draft for the recipient. The text in the email message attempts to convince the recipient to open the attachme...

Threat Outbreak Alert: Fake Sales Notification Email Messages on March 21, 2014

Medium Alert ID: 33467 First Published: 2014 March 24 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales notification for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 21, 2014

Medium Alert ID: 33466 First Published: 2014 March 24 13:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment for the recipient. The email attempts to convince the recipient to open the attachment for details. However...

Threat Outbreak Alert: Fake Product Quotation Notification Email Messages on March 20, 2014.

Medium Alert ID: 33446 First Published: 2014 March 21 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Malicious Attachment Notification Email Messages on March 20, 2014.

Medium Alert ID: 33447 First Published: 2014 March 21 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Online Purchase Information Email Messages on March 21, 2014

Medium Alert ID: 33455 First Published: 2014 March 21 14:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain order details for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Payment Information Email Messages on March 21, 2014

Medium Alert ID: 33456 First Published: 2014 March 21 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 21, 2014

Medium Alert ID: 33454 First Published: 2014 March 21 13:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body containing an attachment for the recipient. However, the .rar attachment contains a malicious .exe file that...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on March 20, 2014.

Medium Alert ID: 33453 First Published: 2014 March 21 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the recipient...

Cisco Patches AsyncOS Code Execution Vulnerability

Cisco fixed serious vulnerabilities this week in its email and content security management products that could have let an attacker execute code with the privileges of the root user. The company pushed a fix for its AsyncOS Software in both its Email Security Appliance ESA and the Content Securit...

Code injection

The End User Safelist/Blocklist aka SLBL service in Cisco AsyncOS Software for Email Security Appliance ESA before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance SMA before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrar...

Threat Outbreak Alert: Fake Bank Deposit Notification Email Messages on March 20, 2014

Medium Alert ID: 33441 First Published: 2014 March 20 21:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank deposit notification for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Shipping Delivery Information Email Messages on March 20, 2014

Medium Alert ID: 33444 First Published: 2014 March 20 21:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipping delivery information for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Product Shipping Documents Email Messages on March 19, 2014

Medium Alert ID: 33437 First Published: 2014 March 20 20:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product shipping documents for the recipient. The text in the email message attempts to convince the recipient t...

CVE-2014-2119

The End User Safelist/Blocklist aka SLBL service in Cisco AsyncOS Software for Email Security Appliance ESA before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance SMA before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrar...

CVE-2014-2119

The CVE-2014-2119 issue affects Cisco AsyncOS for Email Security Appliance (ESA) and Content Security Management Appliance (SMA). The End User Safelist/Blocklist (SLBL) service permits an authenticated remote user to execute arbitrary code with root privileges by uploading a modified SLBL databas...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 19, 2014

Medium Alert ID: 33436 First Published: 2014 March 20 18:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment for...

CVE-2014-2077

Open-Xchange AppSuite frontend is affected by an XSS in the email subject field, due to unsafe handling of aria tags in the top bar. The vulnerability allows remote attackers to inject arbitrary script/HTML in the victim’s browser context when viewing emails. Remediation provided by the vendor fi...

Cisco AsyncOS Software Code Execution Vulnerability

Cisco AsyncOS Software for Email Security Appliance ESA and Cisco Content Security Management Appliance SMA contain a vulnerability that could allow an authenticated remote attacker to execute arbitrary code with the privileges of the root user. Cisco has released software updates that address th...