Test ID:	1.3.6.1.4.1.25623.1.0.105744
Category:	CISCO
Title:	Cisco WSA AMP ClamAV Denial of Service Vulnerability
Summary:	A vulnerability in the Clam AntiVirus (ClamAV) software that is used by Cisco Advance Malware Protection (AMP) for Cisco Email Security Appliances (ESAs) and Cisco Web Security Appliances (WSAs) could allow an unauthenticated, remote attacker to cause the AMP process to restart.
Description:	Summary: A vulnerability in the Clam AntiVirus (ClamAV) software that is used by Cisco Advance Malware Protection (AMP) for Cisco Email Security Appliances (ESAs) and Cisco Web Security Appliances (WSAs) could allow an unauthenticated, remote attacker to cause the AMP process to restart. Affected Software/OS: See advisory Solution: This vulnerability is addressed in the following Cisco AsyncOS Software releases: 9.0.1-135 and later / 9.1.1-041 and later CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1405 BugTraq ID: 90968 http://www.securityfocus.com/bid/90968 Cisco Security Advisory: 20160531 Cisco ESA and WSA AMP ClamAV Denial of Service Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160531-wsa-esa https://github.com/vrtadmin/clamav-devel/blob/master/ChangeLog http://www.securitytracker.com/id/1035993 http://www.securitytracker.com/id/1035994 http://www.ubuntu.com/usn/USN-3093-1
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.