Details of VAR-201510-0005

ID

VAR-201510-0005

CVE

CVE-2015-6309

TITLE

Cisco E Email Security Service disruption on the appliance (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2015-005052

DESCRIPTION

Cisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to cause a denial of service (file-descriptor consumption and device reload) via crafted HTTP requests, aka Bug ID CSCuw32211. An attacker can exploit this issue to cause the device to unexpectedly reload, resulting in a denial-of-service condition. This issue is being tracked by Cisco Bug ID CSCuw32211. The appliance offers spam protection, email encryption, data loss prevention, and more

Trust: 1.98

sources: NVD: CVE-2015-6309 // JVNDB: JVNDB-2015-005052 // BID: 76912 // VULHUB: VHN-84270

AFFECTED PRODUCTS

vendor:	cisco	model:	email security appliance	scope:	eq	version:	8.5.6-106	Trust: 2.5
vendor:	cisco	model:	email security appliance	scope:	eq	version:	9.6.0-042	Trust: 1.9
vendor:	cisco	model:	e email security the appliance	scope:	eq	version:	8.5 .6-106	Trust: 0.8
vendor:	cisco	model:	e email security the appliance	scope:	eq	version:	9.6 .0-042	Trust: 0.8

sources: BID: 76912 // JVNDB: JVNDB-2015-005052 // CNNVD: CNNVD-201510-012 // NVD: CVE-2015-6309

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2015-6309
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2015-6309
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201510-012
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-84270
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2015-6309
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:L/AU:S/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-84270
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:L/AU:S/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-84270 // JVNDB: JVNDB-2015-005052 // CNNVD: CNNVD-201510-012 // NVD: CVE-2015-6309

PROBLEMTYPE DATA

problemtype:

CWE-399

Trust: 1.9

sources: VULHUB: VHN-84270 // JVNDB: JVNDB-2015-005052 // NVD: CVE-2015-6309

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201510-012

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201510-012

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-005052

PATCH

title:

41241

url:

http://tools.cisco.com/security/center/viewAlert.x?alertId=41241

Trust: 0.8

sources: JVNDB: JVNDB-2015-005052

EXTERNAL IDS

db:	NVD	id:	CVE-2015-6309	Trust: 2.8
db:	SECTRACK	id:	1033716	Trust: 1.1
db:	JVNDB	id:	JVNDB-2015-005052	Trust: 0.8
db:	CNNVD	id:	CNNVD-201510-012	Trust: 0.7
db:	BID	id:	76912	Trust: 0.4
db:	VULHUB	id:	VHN-84270	Trust: 0.1

sources: VULHUB: VHN-84270 // BID: 76912 // JVNDB: JVNDB-2015-005052 // CNNVD: CNNVD-201510-012 // NVD: CVE-2015-6309

REFERENCES

url:	http://tools.cisco.com/security/center/viewalert.x?alertid=41241	Trust: 2.0
url:	http://www.securitytracker.com/id/1033716	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-6309	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-6309	Trust: 0.8
url:	http://www.cisco.com/c/en/us/products/security/email-security-appliance/index.html	Trust: 0.3
url:	http://www.cisco.com/	Trust: 0.3

sources: VULHUB: VHN-84270 // BID: 76912 // JVNDB: JVNDB-2015-005052 // CNNVD: CNNVD-201510-012 // NVD: CVE-2015-6309

CREDITS

Cisco

Trust: 0.3

sources: BID: 76912

SOURCES

db:	VULHUB	id:	VHN-84270
db:	BID	id:	76912
db:	JVNDB	id:	JVNDB-2015-005052
db:	CNNVD	id:	CNNVD-201510-012
db:	NVD	id:	CVE-2015-6309

LAST UPDATE DATE

2024-11-23T22:01:42.249000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-84270	date:	2018-10-30T00:00:00
db:	BID	id:	76912	date:	2015-09-30T00:00:00
db:	JVNDB	id:	JVNDB-2015-005052	date:	2015-10-07T00:00:00
db:	CNNVD	id:	CNNVD-201510-012	date:	2015-10-09T00:00:00
db:	NVD	id:	CVE-2015-6309	date:	2024-11-21T02:34:45.023

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-84270	date:	2015-10-02T00:00:00
db:	BID	id:	76912	date:	2015-09-30T00:00:00
db:	JVNDB	id:	JVNDB-2015-005052	date:	2015-10-07T00:00:00
db:	CNNVD	id:	CNNVD-201510-012	date:	2015-10-09T00:00:00
db:	NVD	id:	CVE-2015-6309	date:	2015-10-02T15:59:03.223