PT-2009-2758 · Cisco · Cisco Ironport Encryption Appliance+1

Published

2009-01-16

·

Updated

2011-03-08

·

CVE-2009-0053

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Cisco IronPort Encryption Appliance versions 6.2.4 through 6.2.4.1.1 Cisco IronPort Encryption Appliance version 6.2.5 Cisco IronPort Encryption Appliance version 6.2.6 Cisco IronPort Encryption Appliance versions 6.2.7 through 6.2.7.7 Cisco IronPort Encryption Appliance versions 6.3 through 6.3.0.4 Cisco IronPort Encryption Appliance versions 6.5 through 6.5.0.2 Cisco IronPort PostX versions 6.2.1 through 6.2.1.1 Cisco IronPort PostX versions 6.2.2 through 6.2.2.3
Description The issue allows remote attackers to obtain the decryption key via unspecified vectors, related to a logic error.
Recommendations For Cisco IronPort Encryption Appliance version 6.2.4, update to version 6.2.4.1.1 or later. For Cisco IronPort Encryption Appliance version 6.2.5, update to a version after 6.2.5. For Cisco IronPort Encryption Appliance version 6.2.6, update to a version after 6.2.6. For Cisco IronPort Encryption Appliance versions 6.2.7 through 6.2.7.7, update to version 6.2.7.7 or later. For Cisco IronPort Encryption Appliance versions 6.3 through 6.3.0.4, update to version 6.3.0.4 or later. For Cisco IronPort Encryption Appliance versions 6.5 through 6.5.0.2, update to version 6.5.0.2 or later. For Cisco IronPort PostX versions 6.2.1 through 6.2.1.1, update to version 6.2.1.1 or later. For Cisco IronPort PostX versions 6.2.2 through 6.2.2.3, update to version 6.2.2.3 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2009-0053

Affected Products

Cisco Ironport Encryption Appliance
Cisco Ironport Postx