Multiple Cisco Products CVE-2013-3386 Denial of Service Vulnerability

Bugtraq ID:	60806
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3386
Remote:	Yes
Local:	No
Published:	Jun 26 2013 12:00AM
Updated:	Jun 26 2013 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Email Security Appliance 7.6.2 Cisco Email Security Appliance 7.6.1 Cisco Email Security Appliance 7.6 Cisco Email Security Appliance 7.5.2 Cisco Email Security Appliance 7.5.1 Cisco Email Security Appliance 7.5 Cisco Email Security Appliance 7.3.2 Cisco Email Security Appliance 7.3.1 Cisco Email Security Appliance 7.3 Cisco Email Security Appliance 7.1.5 Cisco Email Security Appliance 7.1.4 Cisco Email Security Appliance 7.1.3 Cisco Email Security Appliance 7.1.2 Cisco Email Security Appliance 7.1.1 Cisco Email Security Appliance 7.1 Cisco Content Security Management Appliance 8.0 Cisco Content Security Management Appliance 7.9.1 Cisco Content Security Management Appliance 7.9 Cisco Content Security Management Appliance 7.7.1 Cisco Content Security Management Appliance 7.7 Cisco Content Security Management Appliance 7.2.2 Cisco Content Security Management Appliance 7.2.1 Cisco Content Security Management Appliance 7.2
Not Vulnerable:	Cisco Email Security Appliance 7.6.3-019 Cisco Email Security Appliance 7.1.5-106 Cisco Content Security Management Appliance 8.0.0-404 Cisco Content Security Management Appliance 7.9.1-102

Multiple Cisco Products CVE-2013-3386 Denial of Service Vulnerability

Multiple Cisco products is prone to a denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to cause denial-of-service conditions.

This issue is being tracked by Cisco Bug IDs CSCzv25573 and CSCzv81712.

The following products are affected:

Versions prior to Cisco Email Security Appliance 7.1.5-106 and 7.6.3-019
Versions prior to Cisco Content Security Management Appliance 7.9.1-102 and 8.0.0-404

Multiple Cisco Products CVE-2013-3386 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Cisco Products CVE-2013-3386 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Multiple Cisco Products IronPort Spam Quarantine Denial of Service Vulnerability (Cisco)
  
• Multiple Vulnerabilities in Cisco Content Security Management Appliance (Cisco)
  
• Multiple Vulnerabilities in Cisco Email Security Appliance (Cisco)