Guest

Preview Tool

Cisco Bug: CSCvt83347 - ESA mishandling Unicode filename attachment during AMP processing

Last Modified

Sep 15, 2020

Products (1)

  • Cisco Email Security Appliance

Known Affected Releases

12.5.1-037 13.0.0-392

Description (partial)

Symptom:
AMP quarantined emails will fail to be released from quarantine and they will expire for the file name which contains Unicode characters.

Conditions:
File name contains the Unicode character and they get uploaded to the AMP cloud for file analysis.

eg:
Thu Mar 26 06:12:12 2020 Info: File reputation query initiating. File Name = '\xd0\xa1\xd1\x87\xd1\x91\xd1\x82 \xd0\xb8\xd0\xb0\xd0\xba\xd1\x82\xd0\xa3\xd0\xbe\xd1\x80\xd0\xbb\xd0\xb4\xd0\x9a\xd0\xb2\xd0\xb0\xd0\xbd\xd1\x82 \xd0\xbc\xd0\xb0\xd1\x80\xd1\x82 2020.pdf', MID = 29834233, File Size = 836393 bytes, File Type = application/pdf
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.