Cisco IronPort Desktop Flag Plug-in for Outlook Send Secure Information Disclosure Vulnerability

Bugtraq ID:	40061
Class:	Design Error
CVE:	CVE-2010-1568
Remote:	Yes
Local:	No
Published:	May 11 2010 12:00AM
Updated:	May 25 2010 05:02PM
Credit:	Cisco
Vulnerable:	Cisco IronPort Encryption Appliance 6.3 4 Cisco IronPort Encryption Appliance 6.2.9 .1 Cisco IronPort Encryption Appliance 6.2.9 Cisco IronPort Encryption Appliance 6.2.7 7 Cisco IronPort Encryption Appliance 6.2.7 Cisco IronPort Encryption Appliance 6.2.6 Cisco IronPort Encryption Appliance 6.2.5 Cisco IronPort Encryption Appliance 6.5 Cisco IronPort Encryption Appliance 6.3 Cisco IronPort Desktop Flag Plug-in for Outlook 6.2.4.3
Not Vulnerable:	Cisco IronPort Desktop Flag Plug-in for Outlook 6.5.1

Cisco IronPort Desktop Flag Plug-in for Outlook Send Secure Information Disclosure Vulnerability

Cisco IronPort Desktop Flag Plug-in for Outlook is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks.

Cisco IronPort Desktop Flag Plug-in for Outlook versions 6.2.4.3, up to but not including 6.5.0-006, are vulnerable.

This issue is being tracked by Cisco IronPort bug 65623.

Cisco IronPort Desktop Flag Plug-in for Outlook Send Secure Information Disclosure Vulnerability

Attackers can exploit this issue using readily available tools.

Cisco IronPort Desktop Flag Plug-in for Outlook Send Secure Information Disclosure Vulnerability

Solution:
Updates are available; please see the references for more information.

Cisco IronPort Desktop Flag Plug-in for Outlook Send Secure Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Response: Cisco IronPort Desktop Flag Plug-in for Outlook Informa (Cisco)