PT-2017-12518 · Cisco · Cisco Email Security Appliances

Publicado 2017-11-30 · Atualizado 2019-10-09 · CVE-2017-12353

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliances (ESA) (affected versions not specified)

Description A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner could allow an unauthenticated, remote attacker to bypass configured user filters on the device. This issue is due to improper error handling of a malformed MIME header in an email attachment. An attacker could exploit this by sending an email with a crafted MIME attachment, potentially allowing them to bypass filters and drop the email. The malformed MIME headers may not be RFC compliant, but some mail clients could still allow users to access the attachment, which may not have been properly filtered.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2017-12353

Produtos afetados

Cisco Email Security Appliances

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-12353 · Nota de Segurança
• http://securityfocus.com/bid/102002 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-esa · Aviso do Fabricante
• http://securitytracker.com/id/1039917 · Nota