Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.106457
Category:CISCO
Title:Cisco Email Security Appliance Content Filter Bypass Vulnerability
Summary:A vulnerability in the content filtering functionality of Cisco AsyncOS;Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass user;filters that are configured for an affected device.
Description:Summary:
A vulnerability in the content filtering functionality of Cisco AsyncOS
Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass user
filters that are configured for an affected device.

Vulnerability Insight:
The vulnerability is due to improper filtering of certain TAR format files
that are attached to email messages. An attacker could exploit this vulnerability by sending an email message
that has a crafted TAR file attachment through an affected device.

Vulnerability Impact:
A successful exploit could allow the attacker to bypass user filters that
are configured for the device.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:N/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2016-6465
BugTraq ID: 94901
http://www.securityfocus.com/bid/94901
http://www.securitytracker.com/id/1037404
CopyrightCopyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.