CVE-2015-6309: Medium severity cisco email security appliance firmware vulnerability
Published Oct 2, 2015
·Updated
Cisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to cause a denial of service (file-descriptor consumption and device reload) via crafted HTTP requests, aka Bug ID CSCuw32211.
Affected Software
2 affected components
Cisco Email Security Appliance=9.6.0-042
Cisco Email Security Appliance Firmware=8.5.6-106
Event History
Oct 2, 2015
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6309?
CVE-2015-6309 has been classified as a denial of service vulnerability affecting Cisco Email Security Appliance.
2
How do I fix CVE-2015-6309?
To fix CVE-2015-6309, upgrade the Cisco Email Security Appliance to a version that is unaffected by this vulnerability.
3
What are the affected versions of CVE-2015-6309?
CVE-2015-6309 affects Cisco Email Security Appliance versions 8.5.6-106 and 9.6.0-042.
4
What type of attack does CVE-2015-6309 enable?
CVE-2015-6309 allows remote authenticated users to perform a denial of service attack by sending crafted HTTP requests.
5
Is CVE-2015-6309 exploitable without authentication?
No, CVE-2015-6309 requires remote authenticated user access to exploit the vulnerability.