Cisco IronPort Encryption Appliance Administration Interface Information Disclosure Vulnerability

Bugtraq ID:	38168
Class:	Design Error
CVE:	CVE-2010-0143
Remote:	Yes
Local:	No
Published:	Feb 10 2010 12:00AM
Updated:	Feb 10 2010 12:00AM
Credit:	Jesse Michael and Alexander Senkevitch of Blue Cross Blue Shield of Illinois
Vulnerable:	Cisco IronPort PostX MAP 6.2.9 Cisco IronPort PostX MAP 6.2 Cisco IronPort Encryption Appliance 6.5 2 Cisco IronPort Encryption Appliance 6.2.9 Cisco IronPort Encryption Appliance 6.2.7 7 Cisco IronPort Encryption Appliance 6.2.7 Cisco IronPort Encryption Appliance 6.2.6 Cisco IronPort Encryption Appliance 6.2.5 Cisco IronPort Encryption Appliance 6.2.4 1 Cisco IronPort Encryption Appliance 6.2.4 Cisco IronPort Encryption Appliance 6.5
Not Vulnerable:	Cisco IronPort PostX MAP 6.2.9 .1 Cisco IronPort Encryption Appliance 6.5.2 Cisco IronPort Encryption Appliance 6.2.9 .1

Cisco IronPort Encryption Appliance Administration Interface Information Disclosure Vulnerability

Cisco IronPort Encryption Appliance is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information contained in arbitrary files.

This issue is being tracked by IronPort bug 65921.

The following products are affected.

IronPort Encryption Appliance 6.5 (prior to 6.5.2)
IronPort Encryption Appliance 6.2 (prior to 6.2.9.1)
IronPort PostX MAP (prior to 6.2.9.1)

Cisco IronPort Encryption Appliance Administration Interface Information Disclosure Vulnerability

An attacker can use readily available utilities to exploit this issue.

Cisco IronPort Encryption Appliance Administration Interface Information Disclosure Vulnerability

Solution:
The vendor has released updates. Please see the references for details.

Cisco IronPort Encryption Appliance Administration Interface Information Disclosure Vulnerability

References:

• IronPort Encryption Appliance Homepage (IronPort)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco IronPort Encrypti (Cisco)