CVE-2015-4184: Input Validation

Published Jun 13, 2015

Updated

The anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remote attackers to bypass intended e-mail restrictions via a malformed DNS SPF record, aka Bug IDs CSCuu35853 and CSCuu37733.

Affected Software

3 affected components

Cisco Email Security Appliance=3.331-09

Cisco Email Security Appliance=7.5.1-gpl-022

Cisco Email Security Appliance=8.5.6-074

Event History

Jun 13, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4184?

CVE-2015-4184 has a medium severity level that allows remote attackers to bypass e-mail restrictions.

How do I fix CVE-2015-4184?

To mitigate CVE-2015-4184, update your Cisco Email Security Appliance to the latest firmware version that addresses this vulnerability.

What systems are affected by CVE-2015-4184?

CVE-2015-4184 affects Cisco Email Security Appliance devices running versions 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074.

Can CVE-2015-4184 lead to unauthorized access?

Yes, CVE-2015-4184 can allow attackers to bypass intended email restrictions, potentially leading to unauthorized access.

Is CVE-2015-4184 being actively exploited?

As of the last reports, there have been indications that CVE-2015-4184 could be exploited by attackers using malformed DNS SPF records.