ID de Prueba:	1.3.6.1.4.1.25623.1.0.105777
Categoría:	CISCO
Título:	Cisco Email Security Appliance .zip File Scanning Security Bypass Vulnerability
Resumen:	A vulnerability in the anti-spam filter of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass anti-spam filtering functionality on an affected system.
Descripción:	Summary: A vulnerability in the anti-spam filter of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass anti-spam filtering functionality on an affected system. Vulnerability Insight: The vulnerability is due to improper handling of content in .zip files. An attacker could exploit this vulnerability by sending a malicious .zip file that contains embedded executable content, which could be used to cause additional harm to the system. Affected Software/OS: This vulnerability affects Cisco Email Security Appliance Release 9.7.0-125. Solution: See Vendor advisory. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1438 Cisco Security Advisory: 20160622 Cisco Email Security Appliance .zip File Scanning Security Bypass Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160622-esa http://www.securitytracker.com/id/1036156
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.