Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.105339
Category:CISCO
Title:Cisco AsyncOS for Email Security Appliance Denial of Service Vulnerability
Summary:Cisco AsyncOS for Email Security Appliance is prone to a denial-of-service vulnerability.
Description:Summary:
Cisco AsyncOS for Email Security Appliance is prone to a denial-of-service vulnerability.

Vulnerability Insight:
The vulnerability is due to improper handling of packets sent at high rate to an affected system that is configured for clustering.
An unauthenticated, remote attacker could exploit this vulnerability by sending packets to the target system at a high rate. An exploit could allow the attacker to cause
the affected system to become unresponsive on the clustering and SSH configured ports, resulting in a DoS condition.

Vulnerability Impact:
An attacker can exploit this issue to cause an affected device to become unresponsive,
resulting in a denial-of-service condition.

Affected Software/OS:
This issue is tracked by Cisco Bug IDs CSCur13704, CSCuq05636, CSCuv43307, and CSCuv99383 .

Solution:
Updates are available. Please see the vendor advisory for more information.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:P

Cross-Ref: BugTraq ID: 75703
Common Vulnerability Exposure (CVE) ID: CVE-2015-4236
http://www.securityfocus.com/bid/75703
Cisco Security Advisory: 20150710 Cisco AsyncOS for Cisco Email Security Appliance Cluster Denial of Service Vulnerability
http://tools.cisco.com/security/center/viewAlert.x?alertId=39785
http://www.securitytracker.com/id/1032855
CopyrightThis script is Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.