Threat Outbreak Alert RuleID19275: Email Messages Distributing Malicious Software on December 11, 2015

Medium Alert ID: 42625 First Published: 2015 December 11 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19275 may contain the following files: Name |...

Threat Outbreak Alert RuleID20019: Email Messages Distributing Malicious Software on December 10, 2015

Medium Alert ID: 42615 First Published: 2015 December 10 21:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20019 may contain the following files: Name |...

Threat Outbreak Alert RuleID19939: Email Messages Distributing Malicious Software on December 7, 2015

Medium Alert ID: 42558 First Published: 2015 December 7 20:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19939 may contain the following files: Name |...

chat.village.com.ar XSS vulnerability

Vulnerable URL: http://chat.village.com.ar:8080/webchat/email/offline-mail.jsp?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:32 GMT Vulnerability type:| XSS Vulnerability status:|...

Threat Outbreak Alert RuleID19832: Email Messages Distributing Malicious Software on December 2, 2015

Medium Alert ID: 42469 First Published: 2015 December 3 13:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19832 may contain the following files: Name |...

Threat Outbreak Alert RuleID19828: Email Messages Distributing Malicious Software on December 2, 2015

Medium Alert ID: 42463 First Published: 2015 December 3 13:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19828 may contain the following files: Name |...

Threat Outbreak Alert RuleID19817: Email Messages Distributing Malicious Software on December 2, 2015

Medium Alert ID: 42455 First Published: 2015 December 2 21:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19817 may contain the following files: Name |...

Threat Outbreak Alert RuleID19628: Email Messages Distributing Malicious Software on November 25, 2015

Medium Alert ID: 42269 First Published: 2015 November 25 15:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19628 may contain the following files: Name |...

Cisco Email Security Appliance Multiple Vulnerabilities

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by the following vulnerabilities : - An anti-spam bypass vulnerability exists in the anti-spam scanner due to improper handling of malformed packets. An unauthenticated,...

Threat Outbreak Alert RuleID19278: Email Messages Distributing Malicious Software on November 9, 2015

Medium Alert ID: 42009 First Published: 2015 November 10 13:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19278 may contain the following files: Name |...

Cisco Email Security Appliance Email Scanner Denial of Service Vulnerability

A vulnerability in the email message filtering feature of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause an ESA device to become unavailable due to a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text...

Cisco Email Security Appliance Default Credentials (HTTP)

The remote Cisco Email Security Appliance web interface is using known default credentials. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cisco Email Security Appliance (ESA) Detection Consolidation

Consolidation of Cisco Email Security Appliance ESA detections. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco AsyncOS Denial of Service Vulnerability (CNVD-2015-07403)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. Cisco AsyncOS message filters are configured with a variety of rules that incorrectly process malformed fields. a remote attacker can construct attachments to special messag...

CVE-2015-6291

Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance ESA devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and...

CVE-2015-6291

Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance ESA devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and...

CVE-2015-6291

CVE-2015-6291 affects Cisco AsyncOS on Email Security Appliance (ESA) devices. Root cause: improper input validation when filtering attachments (body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and attachment-dictionary-match), which can...

CVE-2015-6321

Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance ESA devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Appliance SMA devices; and before 7.7.0-7...

CVE-2015-6321

Cisco AsyncOS contains a denial-of-service vulnerability (CVE-2015-6321) in the network stack triggered by a flood of TCP packets, leading to memory exhaustion and disruption of new TCP connections. Affected products include Cisco Email Security Appliance (ESA) on various 8.5.x–9.6.x branches, Ci...

Cisco Email Security Appliance AsyncOS TCP Flood Denial of Service Vulnerability

A vulnerability in the network stack of Cisco AsyncOS for Email Security Appliance could allow an unauthenticated, remote attacker to exhaust all available memory, preventing the affected device from accepting new TCP connections. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions...