Cisco Web Security Appliance Web框架任意命令执行漏洞(CVE-2013-3384)

CVECAN ID: CVE-2013-3384 Cisco Web Security Appliance是安全的Web网关，在一个平台上集成了恶意软件防护、应用可视化控制、策略控制等。Cisco IronPort AsyncOS是电子邮件安全设备。 Cisco Web Security Appliance设备上的IronPort AsyncOS在Web框架的实现上，以及Content Security Management Appliance设备和Email Security...

Threat Outbreak Alert: Fake Late Payment Notification Email Messages on July 1, 2013

Medium Alert ID: 29907 First Published: 2013 July 1 19:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a late payment notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Online Account Information Verification Email Messages on June 30, 2013

Medium Alert ID: 29866 First Published: 2013 July 1 18:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a membership verification notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Packing Invoice and Shipping Information Email Messages on June 30, 2013

Medium Alert ID: 29867 First Published: 2013 July 1 18:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice and shipment notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Shipment Tracking Notification Email Messages on June 30, 2013

Medium Alert ID: 29863 First Published: 2013 July 1 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipment tracking notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Bank Transfer Payment Email Messages on June 28, 2013

Medium Alert ID: 29850 First Published: 2013 July 1 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer payment notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Online Dating Video Sharing Email Messages on June 28, 2013

Medium Alert ID: 29847 First Published: 2013 June 29 08:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to have an attached video file related to a prospective contact from an online dating site. The email message directs the us...

Threat Outbreak Alert: Fake Product Order Catalog Email Messages on June 28, 2013

Low Alert ID: 29831 First Published: 2013 June 29 08:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order catalog attachment for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Banking News Report Email Messages on June 28, 2013

Medium Alert ID: 29839 First Published: 2013 June 28 16:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a commentary from RBS for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on June 28, 2013

Medium Alert ID: 29837 First Published: 2013 June 28 16:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a photo sharing link for the recipient. The text in the email message attempts to convince th...

Threat Outbreak Alert: Fake Bank Deposit Confirmation Notice Email Messages on June 27, 2013

Low Alert ID: 29836 First Published: 2013 June 28 14:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank deposit confirmation notice for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Confidential Business Request Email Messages on June 27, 2013

Medium Alert ID: 29834 First Published: 2013 June 28 14:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a confidential business request for the recipient. The text in the email message attempts to convince the recipie...

Cisco June 2013 Security Updates

Cisco’s Product Security Incident Response Team pushed out software updates for four different network security products. The fixes contain workarounds that can help users mitigate multiple denial-of-service and command-injection vulnerabilities recently found in Cisco’s software. The holes exist...

Cisco Releases Security Advisories

Cisco has released four security advisories to address multiple vulnerabilities. These vulnerabilities may allow a remote attacker to execute arbitrary code on a vulnerable system or cause a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco...

CVE-2013-3384

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management...

CVE-2013-3386

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

Code injection

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

CVE-2013-3386

CVE-2013-3386 affects Cisco IronPort AsyncOS ISQ in Cisco Email Security Appliance (ESA) and Content Security Management Appliance (CMA). The vulnerability allows a remote attacker to cause a denial of service (service crash/hang) by generating a high rate of TCP connection attempts. Affected ver...

CVE-2013-3385

CVE-2013-3385 affects Cisco IronPort AsyncOS management GUI across multiple Cisco devices (WSA, ESA, CMA). The vulnerability allows remote attackers to cause a denial of service (system hang) by sending a series of HTTP or HTTPS requests to the management interface. Affected versions include WSA ...

CVE-2013-3384

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management...