Cisco Email Security Appliance MIME Header Processing Filter Bypass Vulnerability

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. The vulnerability is due to improper err...

Cisco Releases Security Updates for Multiple Products

Cisco has released several updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and apply the...

Cisco Secure Firewall Management Center Detection

Cisco Secure Firewall Management Center is running on the remote host. Cisco Secure Firewall Management Center is a comprehensive management platform for managing firewalls, application control, intrusion prevention, URL filtering, and advanced malware protection. It was possible to obtain versio...

CVE-2016-6360

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. Affected Products: Cisco...

CVE-2016-1486

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

Design/Logic Flaw

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. Affected Products: Cisco...

PT-2016-6844

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Email Security Appliances ESA versions 9.5 through the first fixed release Cisco AsyncOS Software for Web Security Appliances WSA versions prior to the first fixed release Description A vulnerability in Advanced...

CVE-2016-6360: Improper Input Validation

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. Affected Products: Cisco...

Cisco Email Security Appliance JAR Advanced Malware Protection DoS Vulnerability (cisco-sa-20161026-esawsa3)

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. The vulnerability is due to...

Cisco Email and Web Security Appliance JAR Advanced Malware Protection DoS Vulnerability

A vulnerability in Advanced Malware Protection AMP for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the AMP process unexpectedly restarting. The vulnerability is due to...

Cisco Email Security Appliance Advanced Malware Protection Attachment Scanning Denial of Service Vulnerability

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

CVE-2016-1405

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

Design/Logic Flaw

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

UBUNTU-CVE-2016-1405

libclamav in ClamAV aka Clam AntiVirus, as used in Advanced Malware Protection AMP on Cisco Email Security Appliance ESA devices before 9.7.0-125 and Web Security Appliance WSA devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service AMP process...

CVE-2016-1368

Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection AMP for Networks component on these appliances, allows remote attackers to cause a denial of service packet-processing outage via crafted...

CVE-2016-1368

CVE-2016-1368 affects Cisco FirePOWER System Software 5.3.x (up to 5.3.0.6) and 5.4.x (up to 5.4.0.3) on FirePOWER 7000/8000 appliances and the AMP for Networks component. The issue is caused by improper packet handling in the packet-processing subsystem when packets are passed through sensing in...

CVE-2016-1368

Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection AMP for Networks component on these appliances, allows remote attackers to cause a denial of service packet-processing outage via crafted...

CVE-2016-1368: Undefined Security Weakness

Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection AMP for Networks component on these appliances, allows remote attackers to cause a denial of service packet-processing outage via crafted...

CVE-2016-1315

The proxy engine in Cisco Advanced Malware Protection AMP, when used with Email Security Appliance ESA 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338...

CVE-2016-1315

The proxy engine in Cisco Advanced Malware Protection AMP, when used with Email Security Appliance ESA 9.5.0-201, 9.6.0-051, and 9.7.0-125, allows remote attackers to bypass intended content restrictions via a malformed e-mail message containing an encoded file, aka Bug ID CSCux45338...