漏洞类别:Cisco
漏洞等级:
漏洞信息
A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition when the FTP application unexpectedly quits.
The vulnerability is due to improper input validation of user-supplied fields when logging in using FTP.
漏洞危害
An attacker could exploit this vulnerability by opening an FTP connection to the targeted device and crafting user-supplied parameters. An exploit could allow the attacker to cause a partial DoS condition when the FTP process unexpectedly quits. This vulnerability does not impact other user traffic.
解决方案
Refer to Cisco advisory cisco-sa-20161026-esa6 for updates and patch information.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0day
文章评论