Vulnerability Bulletins |
Cisco Email Security Appliance Format String Vulnerability |
|
| Affected software | Cisco |
|
The Cisco Email Security Appliance (ESA) contains a vulnerability that could allow an unauthenticated, remote attacker to impact the integrity and availability of services and data on the affected device. The impact includes a partial denial of service (DoS). In addition, the attacker could override part of the memory of the affected device. The vulnerability is due to improper validation of string input in the web application. An attacker could exploit this vulnerability by sending a crafted More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150909-CVE-2015-6285?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Email%20Security%20Appliance%20Format%20String%20Vulnerabili |
|