Detections
Analytics

Cisco Email Security Appliance Multiple DoS Vulnerabilities (cisco-sa-20190109-esa-dos / cisco-sa-20190109-esa-url-dos)

high Nessus Plugin ID 121248

Language:

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

According to its self-reported version, the Cisco Email Security Appliance (ESA) is affected by the following vulnerabilities:

 - A denial of service (DoS) vulnerability exists in Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification and S/MIME Public Key Harvesting features due to improper input validation of S/MIME-signed emails. An unauthenticated, remote attacker can exploit this issue, via malicious S/MIME-signed email, to cause the process to stop responding. (CVE-2018-15453)

 - A denial of service (DoS) vulnerability exists in email message filtering feature due to improper filtering of email messages that contain references to whitelisted URLs. An unauthenticated, remote attacker can exploit this issue, via malicious email message that contains a large number of whitelisted URLs, to cause the system to stop responding (CVE-2018-15460).

Solution

Upgrade to the relevant fixed version referenced in Cisco Security Advisory cisco-sa-20190109-esa-dos and cisco-sa-20190109-esa-url-dos.

See Also

http://www.nessus.org/u?17b6199e

http://www.nessus.org/u?b3856e4d

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk73786

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm81627

Plugin Details

Severity: High

ID: 121248

File Name: cisco-sa-20190109-esa-dos.nasl

Version: 1.8

Type: combined

Family: CISCO

Published: 1/18/2019

Updated: 6/26/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2018-15460

CVSS v3

Risk Factor: High

Base Score: 8.6

Temporal Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:cisco:email_security_appliance_firmware

Required KB Items: Host/AsyncOS/Cisco Email Security Appliance/Version

Exploit Ease: No known exploits are available

Patch Publication Date: 1/9/2019

Vulnerability Publication Date: 1/9/2019

Reference Information

CVE: CVE-2018-15453, CVE-2018-15460

BID: 106507, 106511