Code injection

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

CVE-2013-3384

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management...

CVE-2013-3386

CVE-2013-3386 affects Cisco IronPort AsyncOS ISQ in Cisco Email Security Appliance (ESA) and Content Security Management Appliance (CMA). The vulnerability allows a remote attacker to cause a denial of service (service crash/hang) by generating a high rate of TCP connection attempts. Affected ver...

CVE-2013-3385

CVE-2013-3385 affects Cisco IronPort AsyncOS management GUI across multiple Cisco devices (WSA, ESA, CMA). The vulnerability allows remote attackers to cause a denial of service (system hang) by sending a series of HTTP or HTTPS requests to the management interface. Affected versions include WSA ...

CVE-2013-3386

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

CVE-2013-3385

The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-602; Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019; and Content Security Management Appliance...

Threat Outbreak Alert: Fake Product Order Quotation Email Messages on June 25, 2013

Medium Alert ID: 29828 First Published: 2013 June 27 19:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quotation for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Payment Transfer Notification Email Messages on October 25, 2013

Medium Alert ID: 29810 First Published: 2013 June 27 17:02 GMT Last Updated: 2013 October 28 14:12 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transfer notification for the recipient. The text in the email...

Threat Outbreak Alert: Fake Dating Profile Video Email Messages on June 26, 2013

Medium Alert ID: 29809 First Published: 2013 June 27 16:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a personal video for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Scanned Document Delivery Email Messages on June 27, 2013

Low Alert ID: 29812 First Published: 2013 June 27 13:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document attachment for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Shipping Document Email Messages on June 26, 2013

Low Alert ID: 29814 First Published: 2013 June 27 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment of shipping documents for the recipient. The text in the email message attempts to persuade the...

Threat Outbreak Alert: Fake Personal Photo Sharing Email Messages on June 27, 2013

Low Alert ID: 29816 First Published: 2013 June 27 13:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain personal photos for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Malicious Attachment Email Messages on June 26, 2013

Medium Alert ID: 29804 First Published: 2013 June 26 17:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Multiple Vulnerabilities in Cisco Email Security Appliance

Cisco IronPort AsyncOS Software for Cisco Email Security Appliance is affected by the following vulnerabilities: Web Framework Authenticated Command Injection Vulnerability IronPort Spam Quarantine Denial of Service Vulnerability Management GUI Denial of Service Vulnerability Successful...

Threat Outbreak Alert: Fake Shipping Order Information Email Messages on June 26, 2013

Low Alert ID: 29800 First Published: 2013 June 26 15:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipping order information for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Shipping Manifest Document Email Messages on June 25, 2013

Medium Alert ID: 29799 First Published: 2013 June 26 14:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment of shipping documents for the recipient. The text in the email message attempts to persuade the...

Threat Outbreak Alert: Fake Sample Product Purchase Order Email Messages on June 24, 2013

Low Alert ID: 29774 First Published: 2013 June 25 14:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sample product purchase order attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Order Inquiry Email Messages on June 25, 2013

Low Alert ID: 29778 First Published: 2013 June 25 13:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order inquiry notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Tax Payment Attachment Email Messages on June 24, 2013

Medium Alert ID: 29772 First Published: 2013 June 25 12:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain a tax payment attachment for the recipient. The text in the email message attempts to convince t...

Threat Outbreak Alert: Fake Wire Transfer Failure Notification Email Messages on June 24, 2013

Medium Alert ID: 29769 First Published: 2013 June 24 19:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed wire transfer notification for the recipient. The text in the email message attempts to convince the...