Cisco Cisco Email Security Appliance C690

83262

Fixed: FreeBSD telnetd Remote Code Execution Vulnerability

This hot patch fixes a vulnerability in the Cisco IronPort Email Security appliance that 
could have allowed a remote, unauthenticated attacker to execute arbitrary code with 
elevated privileges.

For more information on the vulnerability, see the Cisco security advisory at 
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2012
0126-ironport

82012 

After reboot, an appliance upgraded to AsyncOS 7.5.1-026 may suspend all listeners, 
causing the appliance to stop accepting incoming email messages. If you suspect this 
issue, enter the 

status detail

 command in the CLI. If this issue has occurred, the 

Resource Conservation line will show 999. 

78178

Previously, a C660, C670, X1060, or X1070 appliance would become unresponsive 
after processing a high amount of message traffic with large attachments over an 
extended period of time. This issue required the work queue, scanning engines, and 
other AsyncOS features to be handling a constant high level of traffic in order to 
create the excessive memory usage that caused the appliance to become unresponsive. 
This issue has been resolved.

80072

When processing a message, the Email Security appliance performs feature key 
checks when running certain filter rules. The performance of these feature key checks 
slowed down in AsyncOS 7.5.0 and caused a slowdown in processing messages 
through the email pipeline. This issue has been resolved.

80678 

Fixed: Infrequent Race Condition Could Lock Up Email Security Appliance 

When this issue occurred, the Email Security appliance stopped communicating with 
associated Security Management appliances, and stopped responding to input via GUI 
and CLI.