Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2016-6358 Details

Description

A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition when the FTP application unexpectedly quits. More Information: CSCux68539. Known Affected Releases: 9.1.0-032 9.7.1-000. Known Fixed Releases: 9.1.1-038.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa6	CVE	Vendor Advisory
http://www.securityfocus.com/bid/93905	CVE
http://www.securitytracker.com/id/1037115	CVE
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa6	[email protected]	Vendor Advisory
http://www.securityfocus.com/bid/93905	[email protected]
http://www.securitytracker.com/id/1037115	[email protected]

see all 6 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]

Affected Products

Product	Versions
cisco email security appliance	9.7.1-066 9.7.2-046 9.7.2-047 9.7.2-054 9.9.6-026
CPE cpe:2.3:a:cisco:email_security_appliance:9.7.1-066:::::::* cpe:2.3:a:cisco:email_security_appliance:9.7.2-046:::::::* cpe:2.3:a:cisco:email_security_appliance:9.7.2-047:::::::* cpe:2.3:a:cisco:email_security_appliance:9.7.2-054:::::::* cpe:2.3:a:cisco:email_security_appliance:9.9.6-026:::::::* cpe:2.3:a:cisco:email_security_appliance:9.9_base:::::::* Remediation No remediation found in references.

Product

Versions

cisco email security appliance

9.7.1-066

9.7.2-046

9.7.2-047

9.7.2-054

9.9.6-026

CPE

cpe:2.3:a:cisco:email_security_appliance:9.7.1-066:*:*:*:*:*:*:*
cpe:2.3:a:cisco:email_security_appliance:9.7.2-046:*:*:*:*:*:*:*
cpe:2.3:a:cisco:email_security_appliance:9.7.2-047:*:*:*:*:*:*:*
cpe:2.3:a:cisco:email_security_appliance:9.7.2-054:*:*:*:*:*:*:*
cpe:2.3:a:cisco:email_security_appliance:9.9.6-026:*:*:*:*:*:*:*
cpe:2.3:a:cisco:email_security_appliance:9.9_base:*:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
May 6, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jul 29, 2017	CVE Modified	[email protected]
Nov 28, 2016	CVE Modified	[email protected]
Oct 30, 2016	CVE Translated	[email protected]
Oct 29, 2016	CVE Translated	[email protected]
Oct 28, 2016	Modified Analysis	[email protected]
Oct 28, 2016	Initial Analysis	[email protected]