Cisco Email Security Appliance .zip File Scanning Security Bypass Vulnerability

A vulnerability in the anti-spam filter of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass anti-spam filtering functionality on an affected system.

The vulnerability is due to improper handling of content in .zip files. An attacker could exploit this vulnerability by sending a malicious .zip file that contains embedded executable content, which could be used to cause additional harm to the system.

This vulnerability affects Cisco Email Security Appliance Release 9.7.0-125.

Checks if a vulnerable version is present on the target host.

See Vendor advisory.