Security Advisory

CVE-2014-3381

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-10-19 01:00:00

Last updated 2024-08-06 10:43:05

Assigner cisco

CVSS score not scored

State PUBLISHED

Description

The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance (ESA) does not properly analyze ZIP archives, which allows remote attackers to bypass malware filtering via a crafted archive, aka Bug ID CSCup07934.

← Browse all CVEs View on cve.org ↗