Cisco Secure Email Gateway Arbitrary File Write Vulnerability | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

		Cisco Secure Email Gateway Arbitrary File Write Vulnerability (cisco.com)
		1 point by doener 60 days ago \| hide \| past \| favorite \| 1 comment

richij 60 days ago [–]

tl;dr: Send an email message with a carefully crafted file attachment. Triggers a parsing bug (presumably a buffer overflow). Attacker could cause several bad things, including adding a root user. Yikes.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact