CVE-2010-4681

Description

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901.

Related CPE's

ociscoadaptive_security_appliance_software********

ociscoadaptive_security_appliance_software7.0*******

ociscoadaptive_security_appliance_software7.0\(0\)*******

ociscoadaptive_security_appliance_software7.0\(2\)*******

ociscoadaptive_security_appliance_software7.0\(4\)*******

ociscoadaptive_security_appliance_software7.0\(5\)*******

ociscoadaptive_security_appliance_software7.0\(5.2\)*******

ociscoadaptive_security_appliance_software7.0\(6.7\)*******

ociscoadaptive_security_appliance_software7.0.1*******

ociscoadaptive_security_appliance_software7.0.1.4*******

References

http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf

45767

42931

1024963

asa-smtpinspection-security-bypass(64607)

CvssV3 impact

Could not find any metrics

CvssV2 impact

Version

2.0

VectorString

AV:N/AC:L/Au:N/C:P/I:P/A:P

AccessVector

NETWORK

AccessComplexity

LOW

Authentication

NONE

ConfidentialityImpact

PARTIAL

IntegrityImpact

PARTIAL

AvailabilityImpact

PARTIAL

BaseScore

7.5

Created by Yello
About Severity.io