Cisco Issues IronPort Patch - Vulnerabilities exposed systems to remote crash and takeover
Cisco has issued a patch for vulnerabilities that exposed its IronPort AsyncOS software for the Cisco e-mail security appliance to cover denial-of-service and command injection problems.
The vulnerability, described here, exposed several IronPort components. Its Web framework would allow and authenticated remote user to execute arbitrary commands with elevated privileges.
“An authenticated but unprivileged attacker could exploit this vulnerability by sending a crafted URL to the affected system, or by convincing a valid user to click on a malicious URL. A successful exploit could allow an attacker with sufficient knowledge to take complete control of the affected device,” Cisco notes.
Cisco also notes that the IronPort spam quarantine and its management GUI are both vulnerable to denial-of-service attacks. The spam quarantine has an improper handling of TCP connection requests at high speed, while the GUI is vulnerable to DoS attacks on HTTP and HTTPS connections.
Cisco has patches available for affected software.
Facebook
Twitter
LinkedIn
Instagram
Call us today on 01283 576162 to talk directly to one of our server specialists
Who we are
Europe's specialist value added distributor of server chassis, server components and server systems.
Server Case is a specialist server chassis distributor based here in the United Kingdom, with an extensive range of 19” rackmount cases built to suit a variety of environments; including remote industrial servers and everything in between. Furthermore, our distribution partnerships have allowed us to develop and deliver Server Barebones and fully configured systems to the vast IT Channel and Enterprise customers.
Latest Blog
Embracing Efficiency with Water Cooled 1U and 4U Rackmount Chassis
Posted on: 19th Jul 2024
In the dynamic world of IT infrastructure, the demand for efficient, reliable, and high-performance server solutions is ever-increasing. One innovation that stands out in addressing these needs is the water-cooled rackmount chassis. Server Case offers a range of water-cooled 1U and 4U rackmount chassis designed to meet the rigorous demands of modern data centres and enterprise environments. The A... [...] Read more
Latest Video
View more of our reviews, unboxing and installation videos on YouTube.
Business Links
Site Information