01 JUL

Cisco Issues IronPort Patch - Vulnerabilities exposed systems to remote crash and takeover

Published by Richard Parry on 1st Jul 2013

Cisco has issued a patch for vulnerabilities that exposed its IronPort AsyncOS software for the Cisco e-mail security appliance to cover denial-of-service and command injection problems.



The vulnerability, described here, exposed several IronPort components. Its Web framework would allow and authenticated remote user to execute arbitrary commands with elevated privileges.

“An authenticated but unprivileged attacker could exploit this vulnerability by sending a crafted URL to the affected system, or by convincing a valid user to click on a malicious URL. A successful exploit could allow an attacker with sufficient knowledge to take complete control of the affected device,” Cisco notes.

Cisco also notes that the IronPort spam quarantine and its management GUI are both vulnerable to denial-of-service attacks. The spam quarantine has an improper handling of TCP connection requests at high speed, while the GUI is vulnerable to DoS attacks on HTTP and HTTPS connections.

Cisco has patches available for affected software.

Cisco Issues IronPort Patch - Vulnerabilities exposed systems to remote crash and takeover

Would you like to know more about this article and how Server Case UK can help your organisation? Please complete the form below and one of our team will get back to you right away.

Submit

Weekly Updates

We update our News every week with new content. Please subscribe to our news feed for information about press, corporate updates and what's happening at Server Case UK.

Recent Posts

NVIDIA Quadro RTX 4000 Is Here!
NVIDIA Quadro RTX 4000 Is Here!
Published by Andrew McLean on 11th Dec 2018
Server Case UK attains NVIDIA Preferred Partner status.
Server Case UK attains NVIDIA Preferred Partner status.
Published by Andrew McLean on 26th Oct 2018
Server Case UK Nominated for Burton Mail Small Business of the Year Award
Inside our builds
Inside our builds
Published by Andrew McLean on 28th Jun 2018

LinkedIn

Instagram

Call us today on 01283 576162 to talk directly to one of our server specialists

  • Secured by Sage Pay
  • PayPal