CVE-2015-0523 Denial of service in n/a
Remote attackers can cause a denial of service in RSA Certificate Manager Administration Server by sending a malformed MIME email message.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-0523?
CVE-2015-0523 is a high-severity denial of service vulnerability in n/a, published on 12 Mar 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to cause an Administration Server denial of service via an invalid MIME e-mail message with a multipart/* Content-Type header.
Weakness: CWE-20
Which versions are affected by CVE-2015-0523?
It affects 2 products.
Products include Emc Rsa Certificate Manager, Emc Rsa Registration Manager.
How do I fix CVE-2015-0523?
No fix has been published for CVE-2015-0523 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2015-0523 being exploited?
There is no known exploitation of CVE-2015-0523 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-mg3f-c28h-fg9m.