CVE-2014-3381: Undefined Security Weakness

The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance ESA does not properly analyze ZIP archives, which allows remote attackers to bypass malware filtering via a crafted archive, aka Bug ID CSCup07934...

PT-2014-5271

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA versions 8.5 and earlier Description The issue is related to the ZIP inspection engine, which does not properly analyze ZIP archives. This allows remote attackers to bypass malware filtering by using a crafte...