PT-2010-1958 · Cisco · Cisco Ironport Encryption Appliance+1

Publicado 2010-02-11 · Atualizado 2010-02-26 · CVE-2010-0143

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IronPort Encryption Appliance versions 6.2.x through 6.2.9.0 Cisco IronPort Encryption Appliance versions 6.5.x through 6.5.1 IronPort PostX MAP versions 6.2.x through 6.2.9.0

Description The issue allows remote attackers to read arbitrary files via unknown vectors in the administrative interface of the embedded HTTPS server.

Recommendations For Cisco IronPort Encryption Appliance versions 6.2.x through 6.2.9.0, update to version 6.2.9.1 or later. For Cisco IronPort Encryption Appliance versions 6.5.x through 6.5.1, update to version 6.5.2 or later. For IronPort PostX MAP versions 6.2.x through 6.2.9.0, update to version 6.2.9.1 or later.

Correção

Identificadores relacionados

CVE-2010-0143

Produtos afetados

Cisco Ironport Encryption Appliance

Ironport Postx Map

Referências · 4

• http://cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html · Aviso do Fabricante
• http://secunia.com/advisories/38525 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0143 · Nota de Segurança