PT-2010-1958 · Cisco · Cisco Ironport Encryption Appliance+1

Published 2010-02-11 · Updated 2010-02-26 · CVE-2010-0143

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IronPort Encryption Appliance versions 6.2.x through 6.2.9.0 Cisco IronPort Encryption Appliance versions 6.5.x through 6.5.1 IronPort PostX MAP versions 6.2.x through 6.2.9.0

Description The issue allows remote attackers to read arbitrary files via unknown vectors in the administrative interface of the embedded HTTPS server.

Recommendations For Cisco IronPort Encryption Appliance versions 6.2.x through 6.2.9.0, update to version 6.2.9.1 or later. For Cisco IronPort Encryption Appliance versions 6.5.x through 6.5.1, update to version 6.5.2 or later. For IronPort PostX MAP versions 6.2.x through 6.2.9.0, update to version 6.2.9.1 or later.

Fix

Related Identifiers

CVE-2010-0143

Affected Products

Cisco Ironport Encryption Appliance

Ironport Postx Map

References · 4

• http://cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0143 · Security Note
• http://secunia.com/advisories/38525 · Note