PT-2010-1959 · Cisco+1 · Cisco Ironport Encryption Appliance+1

Published 2010-02-11 · Updated 2010-02-26 · CVE-2010-0144

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IronPort Encryption Appliance versions 6.2.x through 6.2.9.0 Cisco IronPort Encryption Appliance versions 6.5.x through 6.5.1 IronPort PostX MAP versions 6.2.x through 6.2.9.0

Description The issue allows remote attackers to read arbitrary files via unknown vectors.

Recommendations For Cisco IronPort Encryption Appliance versions 6.2.x through 6.2.9.0, update to version 6.2.9.1 or later. For Cisco IronPort Encryption Appliance versions 6.5.x through 6.5.1, update to version 6.5.2 or later. For IronPort PostX MAP versions 6.2.x through 6.2.9.0, update to version 6.2.9.1 or later.

Fix

Related Identifiers

CVE-2010-0144

Affected Products

Cisco Ironport Encryption Appliance

Ironport Postx Map

References · 4

• http://cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0144 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml · Vendor Advisory
• http://secunia.com/advisories/38525 · Note