Detections
Analytics
Cisco IronPort PostX < 6.2.9.1 Multiple Vulnerabilities
critical Nessus Plugin ID 70073
Language:
Synopsis
The remote device runs a service that is affected by multiple vulnerabilities.Description
The version of Cisco IronPort PostX on the remote device is a version prior to 6.2.9.1. As such, it is affected by multiple vulnerabilities :- An unspecified vulnerability in the administrative interface in the embedded HTTPS server allows remote attackers to read arbitrary files via unknown vectors.
(CVE-2010-0143)
- An unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server allows remote attackers to read arbitrary files via unknown vectors. (CVE-2010-0144)
- An unspecified vulnerability in the embedded HTTPS server allows remote attackers to execute arbitrary code via unknown vectors. (CVE-2010-0145)
Solution
Contact Cisco IronPort technical support for update information.See Also
Plugin Details
Severity: Critical
ID: 70073
File Name: cisco_ironport_postx_6291.nasl
Version: 1.8
Type: remote
Family: CISCO
Published: 9/23/2013
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/h:cisco:ironport_postx
Exploit Ease: No known exploits are available
Patch Publication Date: 2/10/2010
Vulnerability Publication Date: 2/10/2010