Description
The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343.
References
- 72528 vdb-entry
- 62829 third-party-advisory
- 20150206 Cisco AsyncOS Software Uuencoded Email Filtering Bypass Vulnerability vendor-advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37384
- cisco-asyncos-cve20150605-sec-bypass(100695) vdb-entry