The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Vulnerability of Cisco Email Security Appliance: denial of service via Attachment

Synthesis of the vulnerability 

An attacker can generate a fatal error via Attachment of Cisco Email Security Appliance, in order to trigger a denial of service.
Impacted products: AsyncOS, Cisco ESA.
Severity of this bulletin: 3/4.
Creation date: 27/10/2016.
Références of this threat: CERTFR-2016-AVI-363, cisco-sa-20161026-esa3, CSCuz63143, CVE-2016-6356, VIGILANCE-VUL-20967.

Description of the vulnerability 

An attacker can generate a fatal error via Attachment of Cisco Email Security Appliance, in order to trigger a denial of service.
Full bulletin, software filtering, emails, fixes, ... (Request your free trial)

This vulnerability impacts software or systems such as AsyncOS, Cisco ESA.

Our Vigil@nce team determined that the severity of this security announce is important.

The trust level is of type confirmed by the editor, with an origin of document.

An attacker with a expert ability can exploit this computer vulnerability note.

Solutions for this threat 

Cisco Email Security Appliance: solution CSCuz63143.
The solution is described on the Cisco site:
  https://tools.cisco.com/bugsearch/bug/CSCuz63143
  https://tools.cisco.com/quickview/bug/CSCuz63143
Full bulletin, software filtering, emails, fixes, ... (Request your free trial)

Computer vulnerabilities tracking service 

Vigil@nce provides a software vulnerability workaround. The Vigil@nce vulnerability database contains several thousand vulnerabilities.