CVE-2014-2119
Published Mar 21, 2014
Last updated 6 years ago
Overview
- Description
- The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance (SMA) before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrary code with root privileges via an FTP session that uploads a modified SLBL database file, aka Bug IDs CSCug79377 and CSCug80118.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 8.5
- Impact score
- 10
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ironport_asyncos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29D12C74-EB0D-4FE2-936E-06D7080C584A",
"versionEndIncluding": "7.9.1-039"
},
{
"criteria": "cpe:2.3:o:cisco:ironport_asyncos:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEBB85CD-0DE0-49CF-80F2-4E343F3E151E"
},
{
"criteria": "cpe:2.3:o:cisco:ironport_asyncos:8.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5165DB3A-40BC-4179-A7DE-92CD2E6784D6"
},
{
"criteria": "cpe:2.3:o:cisco:ironport_asyncos:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CD06A8A-9708-4E53-BEC8-C43938BB336C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:content_security_management_appliance:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60635EC8-9AFA-400D-A919-66E60CDEF852"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ironport_asyncos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B88B09B9-3F50-4A40-9F54-D36E8E511F8B",
"versionEndIncluding": "7.6.2-201"
},
{
"criteria": "cpe:2.3:o:cisco:ironport_asyncos:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEBB85CD-0DE0-49CF-80F2-4E343F3E151E"
},
{
"criteria": "cpe:2.3:o:cisco:ironport_asyncos:8.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5165DB3A-40BC-4179-A7DE-92CD2E6784D6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:email_security_appliance_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BA3A518-E103-4D98-A040-88ED4E0D73CC"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]