Heise Security is reporting that “three bug in older software versions of Cisco PIX security appliances may jointly cause emails with headers signed using Domainkeys Identified Mail (DKIM, RFC 4871) to be rejected.” It adds that the software contains a module that monitors SMTP transactions and overwrites potentially malicious commands. Due to three parser bugs, DKIM headers may be overwritten in the process, according to Heise.
Heise quotes Jim Fenton, who is described as someone who deals with DKIM at Cisco, as saying that all three bugs were fixed in versions 7.2(2.19) and 8.0(2.7) of the PIX software, which area available for download at Cisco.com.
Go to Cisco Subnet for more Cisco news, blogs, discussion forums, security alerts, book giveaways, and more.
