Cisco Email Security Appliance Zip Decompression Engine Denial of Service Vulnerability

[CVE-2020-3134_su]

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

The vulnerability is due to improper validation of zip files. An attacker could exploit this vulnerability by sending an email message with a crafted zip-compressed attachment. A successful exploit could trigger a restart of the content-scanning process, causing a temporary DoS condition.

Cisco has released software updates that address the vulnerability described in this advisory. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-dos-87mBkc8n

[/CVE-2020-3134_su]

Security Impact Rating: Medium

CVE: CVE-2020-3134

Related:

  • No Related Posts

Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device.

For more information about these vulnerabilities, see the Details section of this advisory.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass

Security Impact Rating: Critical

CVE: CVE-2019-15975,CVE-2019-15976,CVE-2019-15977

Related:

  • No Related Posts

Server Security: What to Look for in 2019

EMC logo


Following a challenging year for server security, one big question remains: where is the industry headed in 2019? How do we rethink our approach in the wake of Spectre & Meltdown? What are the dangers on the horizon, and what sort of innovation can businesses use to combat them? I spoke with our Dell Fellow, Mukund Khatri to get the answers to all of this and more. What do you think customers will be dealing with this year? Customers will continue to be plagued by increasing vulnerabilities and security challenges this year. Last year started with … READ MORE



ENCLOSURE:https://blog.dellemc.com/uploads/2019/01/1.23-security-1-600×356.jpg

Update your feed preferences


   

   


   


   

submit to reddit
   

Related:

iVM crash with Windows 7 patch

I do not need a solution (just sharing information)

Folks, just a shout out to those operating the on-box sandbox feature of the CAS. I just implemented this addon after retiring our MAA devices.

There has been an issue identified whereby the KB4480970 rollup causes a crash with iVM rendering the environment unusable. I’ve asked for an estimation on a resolution of this issue, as this prevents patching of the Spectre/Meltdown vulnerabilities.

I’m currently testing this workaround hoping I can have a stable malware analysis configuration on the CAS.

Anyone else experience this issue?

0

Related:

FUTURE PROOF YOUR WORKSPACE WITH DELL USB-C MONITORS

The rapid growth in co-working spaces, modern office lay-out offices and compatibility with multiple devices and platforms are an extremely critical factor for improving productivity and collaboration. Workspace configurations need to cater to shrinking offices without compromising on productivity real estate – their desks.

Dell USB-C monitors reduces cable clutter and provides a seamless connectivity experience for ultimate productivity. USB-C’s combination of video signal, data transfer and power delivery opens the way for a new class of devices that satisfies universal connectivity and future readiness. The same cable that charges your connected client device from 65W up to 100W of power (depending on specific monitor model) is also safeguarded with Dell’s built-in surge protection.

Dell USB-C monitors are ideal for:

Dual-monitor productivity: Easily connect two monitors from a single USB-C connection for an 18% productivity boost.

Future ready workspace: Enable mobile workers with industry standard connectivity that is future ready and will work with all infrastructure environments.

Mixed environments: Solve complicated cable solutions that come with mixed environments by providing a simplified solution that works across multiple vendors

Dell USB-C monitor benefits:

Single cable connectivity: clutter free desk, industry standard connection, video, data and power in one cable

Fast and powerful: Transfer speeds are 10X faster than USB 2.0, delivers up to 100W of power (depending on model) that can charge most PCs including powerful workstations

Convenient configuration/setup: Reduces cost of owning and managing multiple cables and adapters, provides superior device compatibility that works across most vendor devices and operating systems.

Download Spec Sheet for a specific monitor model for more information.

P2219HC, P2419HC, P2719HC, U2419HC, U2719DC, U3219Q, U3419W, U3818DW, U4919DW

Note that U49419DW is available in select markets only. Please contact your Dell EMC account manager for details of local availability.

Related:

Sell Faster and Larger Deals While Protecting Your Margin

Two great Dell Financial Services promotions help your customers modernise technological infrastructure and increase operational efficiency, while staying within an IT budget.

For regular IT refresh cycles

This solution enables a regular IT refresh cycle, protects against obsolescence and avoids escalating costs while paying less than cash prices

  • Flexibility: Equipment can be purchased or returned at end of lease
  • Predictable budgeting

Choose a 36-month or 48-month term:

  • 36months: pay the best price available for your preferred time period
  • 48 months: spread your payments aver a long period

Fair Market Value Leaseover 36 months – for example, on a €10,000 system, your customers make 12 quarterly payments of €725 over 3 years, giving a total of only €8,700 and a TCO of just 87%.

To spread payments over a longer period, similar conditions may be offered on a 4-year lease contract. Please contact us for more information.

Available on client solutions, servers and networking until 3rd February 2019 on spends of €5,000- €500,000.

Low rate finance lease

This solution delivers predictable expenditure over a defined time period.

  • Exceptionally low rate
  • Predictable budgeting

Low Rate Finance Lease over 36 months – a rate of just 1.75% on 12 quarterly payments spread over 3 years. This is also available for a period of 4 years.

Available on client solutions, servers, networking and storage until 3rd February 2019 on spends of €5,000 – €500,000.

Warning: You may pay charges if you repay early, in full or in part, a fixed-rate credit facility. Example “On Client products to the value of €1,000 financed over 36 months, the total cost of credit is €24”.

Contact your local Dell Financial expert to learn more about Dell Financial Services offers.

*Leasing and financing is provided to qualified commercial customers by Dell Bank International d.a.c., trading as Dell Financial Services (DFS) at Innovation House, Cherrywood Science & Technology Park, Cherrywood, Dublin 18, Ireland and is regulated by the Central Bank of Ireland. Offers may not be available or may vary by country. Not all customers may qualify for these rates. Offers may be changed without notice and are subject to product availability, eligibility, credit approval and execution of documentation provided by and acceptable to DFS.

Dell EMC and the DELL EMC logo are trademarks of Dell Inc.

Prices shown are in euros and do not include applicable shipping and handling charges or sales tax.

Related:

Dell’s Stunningly Small Latitude 7400 2-In-1 With ExpressSign-In

With your customers’ ever-increasing need for faster, smarter experiences, Dell exceeds expectations with the new Latitude 7400 2-in-1.

The 2-in-1 market continues to grow year over year as customers demand this versatile form factor, take a look at the benefits IDC have identified in their2-in-1 study. Not only is the market growing but Dell is capturing share quarter over quarter as more and more customers demand a Dell 2-in-1.

To help you be successful in driving demand and closing deals with the new Dell Latitude 7400 2-in-1 we’ll provide you with a full set of marketing assets, available on the Digital Marketing Platform, for you to be able to integrate into your own activity, as well as a complete set of sales material on the Knowledge Centre in the Spring of 2019.

GET TO KNOW THIS BEAUTIFUL MACHINE

  • The only PC that senses your presence

Introducing Dell ExpressSign-in, the world’s first PC proximity sensor enabled by Intel® Context Sensing Technology1. The sensor detects your presence and automatically wakes your system before the infrared camera and Windows Hello let you log in without lifting a finger. It locks when you walk away, so you’re free to run to the next meeting while your data stays secure. Getting to work is faster than ever.

  • Maximum screen in a compact size

The innovative drop hinge design enables the largest screen possible in the most compact size. The four-sided narrow bezel is now 25% thinner than the Latitude 7390 2-in-1 to maximize your view in a small and light frame.

  • Small and sleek

As the world’s smallest 14-inch commercial 2-in-11, it works in even the smallest work spaces. The 14-inch Full HD display in the 13-inch body maximizes your view, while premium machined aluminum with diamond cut edges impress in any setting.

  • Battery life that runs over multiple workdays

Targeting 24 hours of battery life, you can stay up to speed for the entire workday and then some. Plus, our Super Low Power panel optimizes your screen’s performance while saving battery life.

  • Full Dell Ecosystem Support

The Latitude 7400 2-in-1 works with our USB-C docks, enabling it to get 80% power[1] within an hour with Dell ExpressCharge.

Dell InfinityEdge monitors mirror the near frameless display on the laptop to enhance your productivity while docked.

It is fully supported by ProSupport and ProDeploy and can be purchased using PcaaS.


[1] Based on Dell internal analysis, November 2017.

Related: