PT-2015-7155 · Cisco · Cisco Email Security Appliance

Published 2015-11-06 · Updated 2016-12-07 · CVE-2015-6291

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance (ESA) versions prior to 8.5.7-043 Cisco Email Security Appliance (ESA) versions 9.x prior to 9.1.1-023 Cisco Email Security Appliance (ESA) versions 9.5.x and 9.6.x prior to 9.6.0-046

Description The issue arises from the mishandling of malformed fields during certain filtering operations, including body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and attachment-dictionary-match. This allows remote attackers to cause a denial of service due to memory consumption by sending a crafted attachment in an email message.

Recommendations For versions prior to 8.5.7-043, update to version 8.5.7-043 or later. For versions 9.x prior to 9.1.1-023, update to version 9.1.1-023 or later. For versions 9.5.x and 9.6.x prior to 9.6.0-046, update to version 9.6.0-046 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-6291

Affected Products

Cisco Email Security Appliance

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-esa2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6291 · Security Note
• http://securitytracker.com/id/1034064 · Note