ID de Prueba:	1.3.6.1.4.1.25623.1.0.105352
Categoría:	CISCO
Título:	Cisco Email Security Appliance Format String Vulnerability
Resumen:	Cisco Email Security Appliance contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service condition on the affected device. Updates are not available.
Descripción:	Summary: Cisco Email Security Appliance contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service condition on the affected device. Updates are not available. Vulnerability Insight: The vulnerability is due to improper validation of string input in the web application. An attacker could exploit this by sending a crafted HTTP request to the affected device. An exploit could allow the attacker to impact the integrity and availability of services and data of the device including a partial DoS condition. Vulnerability Impact: An unauthenticated, remote attacker could exploit this vulnerability to cause a DoS condition or partial memory override on the affected device. Affected Software/OS: Cisco Email Security Appliance 7.6.0-000/8.0.0-609 Solution: See the vendor advisory for more information. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-6285 Cisco Security Advisory: 20150909 Cisco Email Security Appliance Format String Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=40844 http://www.securitytracker.com/id/1033531
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.