CVE-2015-4278

Published: Jul 16, 2015Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service (per-domain e-mail reception outage) by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806.

Affected (2)

Products: Cisco: Email Security Appliance Firmware

1 product

Email Security Appliance Firmware

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Email Security Appliance Firmware	Version 8.5.6-106
Cisco Email Security Appliance Firmware	Version 9.5.0-201

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://tools.cisco.com/security/center/viewAlert.x?alertId=39940

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1032961

Source: psirt@cisco.com

http://tools.cisco.com/security/center/viewAlert.x?alertId=39940

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1032961

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.