NVD

Id
81612  
Name
CVE-2017-3818  
Description
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device, aka a Malformed MIME Header Filtering Bypass. This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. More Information: CSCvb65245. Known Affected Releases: 9.7.1-066. Known Fixed Releases: 9.8.0-092.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-02-28  
Published
2017-02-03  
Modified Date
2017-02-27  
Seq
2017-3818  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
404684 81612 CVE-2017-3390 http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html  View
404685 81612 CVE-2017-3390 95531  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65359 JVNDB-2017-001722 Cisco ESA の AsyncOS ソフトウェアの MIME スキャナにおけるデバイス上で設定されたユーザフィルタを回避される脆弱性 Cisco E メール セキュリティ アプライアンス (ESA) の AsyncOS ソフトウェアの Multipurpose Internet Mail Extensions (MIME) スキャナには、デバイス上で設定されたユーザフィルタを回避される脆弱性が存在します。 CVE-2017-3818 CVE-2017-3818 81612 5 5.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001722.html 2017-02-01 2017-03-15 View