CVE-2017-3818 — Improper Input Validation in Cisco

Vendor	Product	Version range	Fixed in
cisco	email_security_appliance_firmware	—	—
cisco	email_security_appliance_malformed_mime_header_filtering	—	—

GHSA

GHSA-hhrh-pc24-4cm9: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could

ghsa_unreviewed·2022-05-17

CVE-2017-3818 [MEDIUM] CWE-20 GHSA-hhrh-pc24-4cm9: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device, aka a Malformed MIME Header Filtering Bypass. This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. More Information: CSCvb65245. Known Affected Releases: 9.7.1-066. Known Fixed Releases: 9.8.0-092.

Cisco

Cisco Email Security Appliance Malformed MIME Header Filtering Bypass Vulnerability

vendor_cisco·2017-02-01·CVSS 5.8

CVE-2017-3818 [MEDIUM] CWE-20 Cisco Email Security Appliance Malformed MIME Header Filtering Bypass Vulnerability Cisco Email Security Appliance Malformed MIME Header Filtering Bypass Vulnerability A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a malformed MIME header in an email attachment. An attacker could exploit this vulnerability by sending an email with a crafted MIME attachment. For example, a successful exploit could allow the attacker to bypass configured user filters to drop the email. The malformed MIME headers may not be RFC compliant. However, some mail clients could still allow users to access the attachment, which may not have been properl

Cisco

Cisco Email Security Appliance Malformed MIME Header Filtering Bypass Vulnerability

vendor_cisco·CVSS 3.0

CVE-2017-3818 Cisco Email Security Appliance Malformed MIME Header Filtering Bypass Vulnerability CVE-2017-3818: Cisco Email Security Appliance Malformed MIME Header Filtering Bypass Vulnerability A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a malformed MIME header in an email attachment. An attacker could exploit this vulnerability by sending an email with a crafted MIME attachment. For example, a successful exploit could allow the attacker to bypass configured user filters to drop the email. The malformed MIME headers may not be RFC compliant. However, some mail clients could still allow users to access the attachment, which may not have

CVE-2017-3818: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an…

Affected

CVSS provenance