Lucene search

CiscoCVE-2009-0054

HistoryJan 16, 2009 - 9:30 p.m.

CVE-2009-0054

2009-01-1621:30:03

CWE-255

cisco

web.nvd.nist.gov

cve

2009

0054

cisco

ironport

encryption

appliance

pxe

vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.006

Percentile

78.0%

JSON

PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to capture credentials by tricking a user into reading a modified or crafted e-mail message.

Affected configurations

Nvd

Node

ciscoironport_encryption_applianceMatch6.2.4

ciscoironport_encryption_applianceMatch6.2.4.1

ciscoironport_encryption_applianceMatch6.2.5

ciscoironport_encryption_applianceMatch6.2.6

ciscoironport_encryption_applianceMatch6.2.7

ciscoironport_encryption_applianceMatch6.2.7.1

ciscoironport_encryption_applianceMatch6.2.7.2

ciscoironport_encryption_applianceMatch6.2.7.3

ciscoironport_encryption_applianceMatch6.2.7.4

ciscoironport_encryption_applianceMatch6.2.7.5

ciscoironport_encryption_applianceMatch6.2.7.6

ciscoironport_encryption_applianceMatch6.3

ciscoironport_encryption_applianceMatch6.3.0.1

ciscoironport_encryption_applianceMatch6.3.0.2

ciscoironport_encryption_applianceMatch6.3.0.3

ciscoironport_encryption_applianceMatch6.5

ciscoironport_encryption_applianceMatch6.5.0.1

ciscoironport_postxMatch6.2.1

ciscoironport_postxMatch6.2.2

ciscoironport_postxMatch6.2.2.1

ciscoironport_postxMatch6.2.2.2

VendorProductVersionCPE
ciscoironport_encryption_appliance6.2.4cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*
ciscoironport_encryption_appliance6.2.4.1cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*
ciscoironport_encryption_appliance6.2.5cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*
ciscoironport_encryption_appliance6.2.6cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*
ciscoironport_encryption_appliance6.2.7cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*
ciscoironport_encryption_appliance6.2.7.1cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*
ciscoironport_encryption_appliance6.2.7.2cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*
ciscoironport_encryption_appliance6.2.7.3cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*
ciscoironport_encryption_appliance6.2.7.4cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*
ciscoironport_encryption_appliance6.2.7.5cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ironport_encryption_appliance	6.2.4	cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:::::::*
cisco	ironport_encryption_appliance	6.2.4.1	cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:::::::*
cisco	ironport_encryption_appliance	6.2.5	cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:::::::*
cisco	ironport_encryption_appliance	6.2.6	cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:::::::*
cisco	ironport_encryption_appliance	6.2.7	cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:::::::*
cisco	ironport_encryption_appliance	6.2.7.1	cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:::::::*
cisco	ironport_encryption_appliance	6.2.7.2	cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:::::::*
cisco	ironport_encryption_appliance	6.2.7.3	cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:::::::*
cisco	ironport_encryption_appliance	6.2.7.4	cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:::::::*
cisco	ironport_encryption_appliance	6.2.7.5	cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:::::::*

Rows per page:

1-10 of 211

References

osvdb.org/51396

secunia.com/advisories/33479

securitytracker.com/id?1021593

www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4f7.shtml

www.securityfocus.com/bid/33268

www.vupen.com/english/advisories/2009/0140

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.006

Percentile

78.0%

JSON

Related for CVE-2009-0054