CVE漏洞中文网

0DayBank一个专门收集整理全球互联网漏洞的公开发布网站
  1. 首页
  2. CVE
  3. 正文

CVE-2016-6358 Cisco Email Security Appliance FTP Denial of Service Vulnerability (cisco-sa-20161026-esa6)

2016年11月22日 1208点热度 0人点赞 0条评论

漏洞类别:Cisco

漏洞等级:

漏洞信息

A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition when the FTP application unexpectedly quits.
The vulnerability is due to improper input validation of user-supplied fields when logging in using FTP.

漏洞危害

An attacker could exploit this vulnerability by opening an FTP connection to the targeted device and crafting user-supplied parameters. An exploit could allow the attacker to cause a partial DoS condition when the FTP process unexpectedly quits. This vulnerability does not impact other user traffic.

解决方案

Refer to Cisco advisory cisco-sa-20161026-esa6 for updates and patch information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

cisco-sa-20161026-esa6

0day

标签: 暂无
最后更新:2016年11月24日

小助手

这个人很懒,什么都没留下

点赞
< 上一篇
下一篇 >

文章评论

您需要 登录 之后才可以评论

COPYRIGHT © 2024 www.pdr.cn CVE漏洞中文网. ALL RIGHTS RESERVED.

鲁ICP备2022031030号

联系邮箱:wpbgssyubnmsxxxkkk@proton.me