CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Permissions Privileges and Access Controls
Summary: the end user safelist/blocklist (aka slbl) service in cisco asyncos software for email security appliance (esa) before 7.6.3-023 and 8.x before 8.0.1-023 and cisco content security management appliance (sma) before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrary code with root privileges via an ftp session that uploads a modified slbl database file, aka bug ids cscug79377 and cscug80118.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-03-21
Last Modified Date: 2018-10-30