CVEvulnerability
CVE-2015-0523
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to cause an Administration Server denial of service via an invalid MIME e-mail message with a multipart/* Content-Type header.
Affected configurations
• emc rsa certificate manager (<= 6.8)
• emc rsa registration manager (<= 6.8)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html Third Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Mar/47 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031912 Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html Third Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Mar/47 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031912 Third Party Advisory, VDB Entry