01 JUL

Cisco Issues IronPort Patch - Vulnerabilities exposed systems to remote crash and takeover

Published by Richard Parry on 1st Jul 2013

Cisco has issued a patch for vulnerabilities that exposed its IronPort AsyncOS software for the Cisco e-mail security appliance to cover denial-of-service and command injection problems.



The vulnerability, described here, exposed several IronPort components. Its Web framework would allow and authenticated remote user to execute arbitrary commands with elevated privileges.

“An authenticated but unprivileged attacker could exploit this vulnerability by sending a crafted URL to the affected system, or by convincing a valid user to click on a malicious URL. A successful exploit could allow an attacker with sufficient knowledge to take complete control of the affected device,” Cisco notes.

Cisco also notes that the IronPort spam quarantine and its management GUI are both vulnerable to denial-of-service attacks. The spam quarantine has an improper handling of TCP connection requests at high speed, while the GUI is vulnerable to DoS attacks on HTTP and HTTPS connections.

Cisco has patches available for affected software.

Cisco Issues IronPort Patch - Vulnerabilities exposed systems to remote crash and takeover

Would you like to know more about this article and how Server Case can help your organisation? Please complete the form below and one of our team will get back to you right away.

I want to receive the latest offers and updates about new technology releases for Server Case via email.
Submit

Weekly Updates

We update our Blog every week with new content. Please subscribe to our news feed for information about new products, review, case studies and happenings at Server Case.

Recent Posts

MSI Rackmount Servers: A New Contender in Enterprise Solutions
MSI Rackmount Servers: A New Contender in Enterprise Solutions
Published by Richard Parry on 2nd Aug 2024
Embracing Efficiency with Water Cooled 1U and 4U Rackmount Chassis
Embracing Efficiency with Water Cooled 1U and 4U Rackmount Chassis
Published by Richard Parry on 19th Jul 2024
Keeping Your Servers Cool: Dynatron Industrial Server Grade CPU Coolers
Unveiling the Powerhouse: Introducing the AMD EPYC 4004 Series CPUs
Unveiling the Powerhouse: Introducing the AMD EPYC 4004 Series CPUs
Published by Richard Parry on 31st May 2024

LinkedIn

Instagram

Call us today on 01283 576162 to talk directly to one of our server specialists

  • Secured by Sage Pay
  • PayPal