358 matches found
[SECURITY] [DSA 3176-1] request-tracker4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3176-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 26, 2015 http://www.debian.org/security/faq -...
rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities
Best Practical reports: RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...
McAfee Email Gateway Cross-Site Scripting Vulnerability
McAfee Email Gateway MEG is a suite of email security solutions from the U.S.-based company McAfee McAfee. The program provides incoming threat protection, outgoing encryption, data loss protection and other features. A cross-site scripting vulnerability exists in McAfee Email Gateway. A remote...
CVE-2015-1619
Cross-site scripting XSS vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway MEG 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest...
Cross site scripting
Cross-site scripting XSS vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway MEG 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest...
CVE-2015-1619
CVE-2015-1619 affects McAfee Email Gateway (MEG) Secure Web Mail Client UI. Multiple sources describe an XSS vulnerability in the UI that permits remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages. Affected versions include MEG 7.6.x before...
CVE-2015-1619
Cross-site scripting XSS vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway MEG 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest...
McAfee Email Gateway - Bash Shellshock Code Injection Exploit
A number of security vulnerabilities have been identified in the bash SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
McAfee Email Gateway - Three SSLv3 Vulnerabilities
McAfee Email Gateway is vulnerable to one or more of the three Open Secure Sockets Layer OpenSSL 3.0 SSLv3 vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
McAfee Email Gateway Version
This script performs SSH based detection of McAfee Email Gateway SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
McAfee Email Gateway - OpenSSL vulnerabilities patched in McAfee products
McAfee Email Gateway is vulnerable to a batch of OpenSSL vulnerabilities SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
McAfee Email Gateway GNU Bash Code Injection (SB10085) (Shellshock)
The remote host has a version of McAfee Email Gateway MEG installed that is affected by a command injection vulnerability in GNU Bash known as Shellshock. The vulnerability is due to the processing of trailing strings after function definitions in the values of environment variables. This allows ...
McAfee Email Gateway OpenSSL Multiple Vulnerabilities (SB10075)
The remote host is running a version of McAfee Email Gateway MEG that is affected by the multiple vulnerabilities related to the included OpenSSL library : - An error exists in the function 'ssl3readbytes' that can allow data to be injected into other sessions or allow denial of service attacks...
McAfee Email Gateway (formerly IronMail) - Denial of Service
No description provided by source...
McAfee Email Gateway (formerly IronMail) - Internal Information Disclosure
No description provided by source...
Matt Wright FormMail 1.x Cross-Site Request Forgery Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2080/info FormMail is a widely-used web-based e-mail gateway, which allows form-based input to be emailed to a specified user. A web server can use a remote site's FormMail script without authorization, using remote syste...
McAfee Email Gateway (formerly IronMail) - Cross-Site Scripting (XSS)
No description provided by source...
McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation
No description provided by source...