Cisco Email Security Appliance Content Filter Bypass Vulnerability

A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper input validation of the email body. An attacker could exploit this vulnerability by naming a malicious attachment with a specific pattern. A successful exploit could allow the attacker to bypass configured content filters that would normally block the attachment.

N/A

输入验证不恰当

Cisco Email Security Appliance 输入验证错误漏洞

Cisco Email Security Appliance（ESA）是美国思科（Cisco）公司的一个电子邮件安全设备。 Cisco ESA中附件的扫描存在输入验证错误漏洞，该漏洞源于程序没有对邮件正文执行正确的输入验证。远程攻击者可通过使用特殊的格式命名恶意的附件利用该漏洞绕过所配置的内容过滤器。

N/A

N/A