Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Cisco Secure Email Gateway flaw lets unauthenticated attackers write files and run root commands via crafted attachments.
Cisco says a flaw in the Advanced Malware Protection feature of Cisco Secure Email Gateway allows an unauthenticated remote attacker to write arbitrary files when the file reputation service is enabled. A crafted email attachment can lead to arbitrary file writes and command execution with root privileges on the underlying operating system. Cisco has released software updates and states there are no workarounds. The advisory text does not name a CVE or report exploitation in the wild.
- Unauthenticated remote attackers can abuse AMP attachment handling when file reputation is enabled.
- A crafted email can write arbitrary files and run commands as root.
- Cisco released software updates and says no workarounds exist.
- The advisory text does not report active exploitation or a CVE.
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system. Cisco has released software updates that address this vulnerability. There are no workarounds that…
This source does not provide full text. Read it at sec.cloudapps.cisco.com.