Cisco Secure Email Gateway AMP Arbitrary File Write RCE

An unauthenticated attacker sends an email containing a crafted tar attachment through Cisco Secure Email Gateway. Inside the tar, a POSIX pax extended header applies linkpath=bin/corewatch.sh to a hard-link member. That member also contains the module's shell command launcher. AMP File Reputatio...