Cisco PIX Firewall SMTP Content Filtering Evasion Vulnerability Re-Introduction

Bugtraq ID:	3365
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Sep 26 2001 12:00AM
Updated:	Sep 26 2001 12:00AM
Credit:	Published in a Cisco security advisory.
Vulnerable:	Cisco PIX Firewall 6.0 (1) Cisco PIX Firewall 5.2 (3.210) Cisco PIX Firewall 5.1 (4.206) Cisco PIX Firewall 4.4 (7.202) Cisco PIX Firewall 4.4 (4)
Not Vulnerable:

Cisco PIX Firewall SMTP Content Filtering Evasion Vulnerability Re-Introduction

An old vulnerability that allowed for bypassing of SMTP content filtering has been re-introduced into PIX firmware. This vulnerability is archived in the SecurityFocus vulnerability database as Bugtraq ID: 1698.

Cisco PIX Firewall SMTP Content Filtering Evasion Vulnerability Re-Introduction

There is no exploit required.

Cisco PIX Firewall SMTP Content Filtering Evasion Vulnerability Re-Introduction

Solution:
Cisco has released firmware upgrades:


Cisco PIX Firewall 4.4 (7.202)

• Cisco PIX Firewall 4.4(8)
  

Cisco PIX Firewall 5.1 (4.206)

• Cisco PIX Firewall 5.1(5)
  

Cisco PIX Firewall 6.0 (1)

• Cisco PIX Firewall 6.1(1)
  

Cisco PIX Firewall SMTP Content Filtering Evasion Vulnerability Re-Introduction

References:

• Cisco PIX Firewall Product Homepage (Cisco Systems)
  
• Cisco PIX Firewall SMTP Content Filtering Evasion Vulnerability (SecurityFocus)
  
• Cisco Secure PIX Firewall SMTP Filtering Vulnerability (Cisco Systems)