McAfee Email Gateway formerly IronMail - Local Privilege Escalation

ID EDB-ID:12090
Type exploitdb
Reporter Nahuel Grisolia
Modified 2010-04-06T00:00:00


Local Privilege Escalation in McAfee Email Gateway (formerly IronMail). Local exploit for freebsd platform

                                            Advisory Name: Local Privilege Escalation in McAfee Email Gateway (formerly IronMail)
Vulnerability Class: Local Privilege Escalation
Release Date: Tue Apr 6, 2010
Affected Applications: Secure Mail (Ironmail) ver.6.7.1
Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1
Local / Remote: Local
Severity: Medium - CVSS: 6.4 (AV:L/AC:L/Au:S/C:P/I:C/A:C)
Researcher: Nahuel GrisolĂ­a

Vendor Status: Official Patch Released. Install McAfee Email Gateway 6.7.2 Hotfix 2.
Reference to Vulnerability Disclosure Policy:

Vulnerability Description:
Ironmail was found to allow any CLI user to run arbitrary commands with Admin rights, due to
improper handling of environment variables.

Download: (cybsec_advisory_2010_0404.pdf)