Threat Outbreak Alert RuleID13412: Email Messages Distributing Malicious Software on February 4, 2015

Medium Alert ID: 37353 First Published: 2015 February 5 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13412 may contain the following files: Name |...

Threat Outbreak Alert RuleID13303: Email Messages Distributing Malicious Software on January 28, 2015

Medium Alert ID: 37204 First Published: 2015 January 28 19:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13303 may contain the following files: Name |...

Threat Outbreak Alert RuleID13265: Email Messages Distributing Malicious Software on January 26, 2015

Medium Alert ID: 37157 First Published: 2015 January 26 16:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13265 may contain the following files: Name |...

Threat Outbreak Alert RuleID13252: Email Messages Distributing Malicious Software on January 23, 2015

Medium Alert ID: 37145 First Published: 2015 January 26 16:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13252 may contain the following files: Name |...

Threat Outbreak Alert RuleID13162: Email Messages Distributing Malicious Software on January 20, 2015

Medium Alert ID: 37061 First Published: 2015 January 20 17:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13162 may contain the following files: Name |...

Threat Outbreak Alert RuleID13139: Email Messages Distributing Malicious Software on January 15, 2015

Medium Alert ID: 37033 First Published: 2015 January 16 17:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13139 may contain the following files: Name |...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...

CVE-2015-0577

Multiple cross-site scripting XSS vulnerabilities in the IronPort Spam Quarantine ISQ page in Cisco AsyncOS, as used on the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, a...

CVE-2015-0577

Cisco AsyncOS ISQ (IronPort Spam Quarantine) XSS: multiple vulnerabilities in the ISQ web page on ESA/SMA due to insufficient input validation, enabling remote attackers to inject arbitrary script/HTML via unspecified parameters. Root cause: input validation gaps in the web page. Impact: cross-si...

Threat Outbreak Alert RuleID13083: Email Messages Distributing Malicious Software on January 12, 2015

Medium Alert ID: 36985 First Published: 2015 January 13 15:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13083 may contain the following files: Name |...

Threat Outbreak Alert RuleID12969: Email Messages Distributing Malicious Software on December 24, 2014

Medium Alert ID: 36890 First Published: 2015 January 5 15:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12969 may contain the following files: Name |...

CVE-2004-2771

CVE-2004-2771 affects mailx (Heirloom mailx <=12.5 and BSD mailx <=8.1.2). The vulnerability arises from parsing of email addresses, allowing a local attacker to cause mailx to execute arbitrary shell commands via shell metacharacters in the address. Several connected records corroborate im...

CVE-2014-8016

The Cisco IronPort Email Security Appliance ESA allows remote attackers to cause a denial of service CPU consumption via long Subject headers in e-mail messages, aka Bug ID CSCzv93864...

Code injection

The Cisco IronPort Email Security Appliance ESA allows remote attackers to cause a denial of service CPU consumption via long Subject headers in e-mail messages, aka Bug ID CSCzv93864...

CVE-2014-8016

Cisco IronPort Email Security Appliance (ESA) Subject header length processing vulnerability (CVE-2014-8016) allows an unauthenticated remote attacker to cause high CPU utilization and potential DoS by sending crafted emails with long Subject headers. The issue stems from unbounded Subject header...

CVE-2014-8016

The Cisco IronPort Email Security Appliance ESA allows remote attackers to cause a denial of service CPU consumption via long Subject headers in e-mail messages, aka Bug ID CSCzv93864...

CVE-2014-6319

CVE-2014-6319 affects Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 plus CU6. The root cause is improper validation of tokens in requests, enabling remote attackers to spoof the origin of e‑mail messages. Documented affected versions align with MS14-075 guida...

Threat Outbreak Alert RuleID12728: Email Messages Distributing Malicious Software on December 7, 2014

Medium Alert ID: 36681 First Published: 2014 December 8 16:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12728 may contain the following files: Name |...

Cybercrime Group Preys on Wall Street Insider Information

A criminal hacking group with an innate understanding of how Wall Street moves and what influences stock prices has found a soft spot in more than 100 publicly traded companies and is stealing, among other data, mergers and acquisitions intelligence. The group is homed in on healthcare and...

CVE-2014-5314

CVE-2014-5314 maps to a buffer overflow in Cybozu Office, Cybozu Mailwise and Cybozu Dezie that allows remote authenticated users to execute arbitrary code via email messages. OpenVAS entries and JVN/CVE references confirm affected product families and versions: Cybozu Office up to 10.0.x (pre-10...