Threat Outbreak Alert: Fake Shipment Tracking Notification Email Messages on June 30, 2013

Medium Alert ID: 29863 First Published: 2013 July 1 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipment tracking notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Bank Transfer Payment Email Messages on June 28, 2013

Medium Alert ID: 29850 First Published: 2013 July 1 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer payment notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Online Dating Video Sharing Email Messages on June 28, 2013

Medium Alert ID: 29847 First Published: 2013 June 29 08:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to have an attached video file related to a prospective contact from an online dating site. The email message directs the us...

Threat Outbreak Alert: Fake Product Order Catalog Email Messages on June 28, 2013

Low Alert ID: 29831 First Published: 2013 June 29 08:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order catalog attachment for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Banking News Report Email Messages on June 28, 2013

Medium Alert ID: 29839 First Published: 2013 June 28 16:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a commentary from RBS for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on June 28, 2013

Medium Alert ID: 29837 First Published: 2013 June 28 16:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a photo sharing link for the recipient. The text in the email message attempts to convince th...

Threat Outbreak Alert: Fake Bank Deposit Confirmation Notice Email Messages on June 27, 2013

Low Alert ID: 29836 First Published: 2013 June 28 14:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank deposit confirmation notice for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Confidential Business Request Email Messages on June 27, 2013

Medium Alert ID: 29834 First Published: 2013 June 28 14:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a confidential business request for the recipient. The text in the email message attempts to convince the recipie...

Cisco June 2013 Security Updates

Cisco’s Product Security Incident Response Team pushed out software updates for four different network security products. The fixes contain workarounds that can help users mitigate multiple denial-of-service and command-injection vulnerabilities recently found in Cisco’s software. The holes exist...

Cisco Releases Security Advisories

Cisco has released four security advisories to address multiple vulnerabilities. These vulnerabilities may allow a remote attacker to execute arbitrary code on a vulnerable system or cause a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco...

CVE-2013-3384

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management...

CVE-2013-3386

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

Code injection

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

CVE-2013-3385

CVE-2013-3385 affects Cisco IronPort AsyncOS management GUI across multiple Cisco devices (WSA, ESA, CMA). The vulnerability allows remote attackers to cause a denial of service (system hang) by sending a series of HTTP or HTTPS requests to the management interface. Affected versions include WSA ...

CVE-2013-3386

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

CVE-2013-3386

CVE-2013-3386 affects Cisco IronPort AsyncOS ISQ in Cisco Email Security Appliance (ESA) and Content Security Management Appliance (CMA). The vulnerability allows a remote attacker to cause a denial of service (service crash/hang) by generating a high rate of TCP connection attempts. Affected ver...

CVE-2013-3384

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management...

CVE-2013-3385

The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-602; Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019; and Content Security Management Appliance...

Threat Outbreak Alert: Fake Product Order Quotation Email Messages on June 25, 2013

Medium Alert ID: 29828 First Published: 2013 June 27 19:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quotation for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Payment Transfer Notification Email Messages on October 25, 2013

Medium Alert ID: 29810 First Published: 2013 June 27 17:02 GMT Last Updated: 2013 October 28 14:12 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transfer notification for the recipient. The text in the email...