Lucene search

[email protected]CVE-2010-4681

HistoryJan 07, 2011 - 12:00 p.m.

CVE-2010-4681

2011-01-0712:00:50

[email protected]

web.nvd.nist.gov

cve

2010

4681

cisco

asa

vulnerability

smtp inspection

bypass

cscte14901

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901.

Affected configurations

NVD

Node

ciscoadaptive_security_appliance_softwareRange≤8.2\(2\)

ciscoadaptive_security_appliance_softwareMatch7.0

ciscoadaptive_security_appliance_softwareMatch7.0\(0\)

ciscoadaptive_security_appliance_softwareMatch7.0\(2\)

ciscoadaptive_security_appliance_softwareMatch7.0\(4\)

ciscoadaptive_security_appliance_softwareMatch7.0\(5\)

ciscoadaptive_security_appliance_softwareMatch7.0\(5.2\)

ciscoadaptive_security_appliance_softwareMatch7.0\(6.7\)

ciscoadaptive_security_appliance_softwareMatch7.0.1

ciscoadaptive_security_appliance_softwareMatch7.0.1.4

ciscoadaptive_security_appliance_softwareMatch7.0.2

ciscoadaptive_security_appliance_softwareMatch7.0.4

ciscoadaptive_security_appliance_softwareMatch7.0.4.3

ciscoadaptive_security_appliance_softwareMatch7.0.5

ciscoadaptive_security_appliance_softwareMatch7.0.6

ciscoadaptive_security_appliance_softwareMatch7.0.7

ciscoadaptive_security_appliance_softwareMatch7.0.8

ciscoadaptive_security_appliance_softwareMatch7.0.8interim

ciscoadaptive_security_appliance_softwareMatch7.1

ciscoadaptive_security_appliance_softwareMatch7.1\(2\)

ciscoadaptive_security_appliance_softwareMatch7.1\(2.5\)

ciscoadaptive_security_appliance_softwareMatch7.1\(2.27\)

ciscoadaptive_security_appliance_softwareMatch7.1\(2.48\)

ciscoadaptive_security_appliance_softwareMatch7.1\(2.49\)

ciscoadaptive_security_appliance_softwareMatch7.1\(5\)

ciscoadaptive_security_appliance_softwareMatch7.1.1

ciscoadaptive_security_appliance_softwareMatch7.1.2

ciscoadaptive_security_appliance_softwareMatch7.2

ciscoadaptive_security_appliance_softwareMatch7.2\(1\)

ciscoadaptive_security_appliance_softwareMatch7.2\(1.22\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.5\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.7\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.8\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.10\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.14\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.15\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.16\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.17\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.18\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.19\)

ciscoadaptive_security_appliance_softwareMatch7.2\(2.48\)

ciscoadaptive_security_appliance_softwareMatch7.2.1

ciscoadaptive_security_appliance_softwareMatch7.2.2

ciscoadaptive_security_appliance_softwareMatch7.2.3

ciscoadaptive_security_appliance_softwareMatch7.2.4

ciscoadaptive_security_appliance_softwareMatch7.2.5

ciscoadaptive_security_appliance_softwareMatch8.0

ciscoadaptive_security_appliance_softwareMatch8.0.2

ciscoadaptive_security_appliance_softwareMatch8.0.3

ciscoadaptive_security_appliance_softwareMatch8.0.4

ciscoadaptive_security_appliance_softwareMatch8.0.5

ciscoadaptive_security_appliance_softwareMatch8.2\(1\)

ciscoadaptive_security_appliance_softwareMatch8.2.1

ciscoadaptive_security_appliance_softwareMatch8.2.2

ciscoadaptive_security_appliance_softwareMatch8.2.2interim

AND

cisco5500_series_adaptive_security_appliance

ciscoasa_5500

CPENameOperatorVersion
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwarele8.2\(2\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(0\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(2\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(4\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(5\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(5.2\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(6.7\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0.1
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0.1.4

CPE	Name	Operator	Version
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	le	8.2\(2\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(0\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(2\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(4\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(5\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(5.2\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(6.7\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0.1
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0.1.4

Rows per page:

1-10 of 561

References

secunia.com/advisories/42931

www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf

www.securityfocus.com/bid/45767

www.securitytracker.com/id?1024963

exchange.xforce.ibmcloud.com/vulnerabilities/64607

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

Related for CVE-2010-4681

cvelist1 nvd1 prion1