Kinesphere Corporation Exchange POP3 4.0/5.0 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10180/info It has been reported that Exchange POP3 e-mail gateway is prone to a remote buffer overflow vulnerability that may allow an attacker to execute arbitrary code on a vulnerable system. This issue could allow an...

McAfee Email Gateway OpenSSL Information Disclosure (SB10071) (Heartbleed)

The remote host is running a version of McAfee Email Gateway MEG that is affected by an information disclosure due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory from the...

McAfee Email Gateway OpenSSL TLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 McAfee Email Gateway是一款全面的电子邮件安全解决方案。 McAfee Email Gateway所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 McAfee Email Gateway 7.x 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： https://kc.mcafee.com/corporate/index?page=content&id=SB10071...

McAfee Email Gateway Version

Binary data mcafeeemailgatewayversion.nbin...

McAfee Email Gateway Multiple Vulnerabilities (SB10064)

The remote host is running a version of McAfee Email Gateway MEG that is affected by multiple SQL injection and command execution vulnerabilities: - Multiple SQL injections vulnerabilities exist in the administrative web interface. A remote, authenticated attacker could potentially exploit these...

McAfee Email Gateway/McAfee Email和Web Security Appliance多个SQL注入漏洞

CVE ID:CVE-2013-7092 McAfee Email Gateway是一款电子邮件解决方案。McAfee Email and Web Security Appliance用于智能化的垃圾邮件和恶意软件防护。 通过"eventscol", "eventid", "reason", "eventsorder", "emailstatusorder"和"emailstatuscol" JSON键值提交给/admin/cgi-bin/rpc/doReport/18的输入在用于SQL查询之前缺少过滤，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 McAfee...

McAfee Email Gateway/McAfee Email and Web Security Appliance SQL注入漏洞

CVE ID：CVE-2013-7092 McAfee Email Gateway之前名为IronMail，是企业级的硬件邮件网关和管理平台。 由于通过"eventscol", "eventid", "reason", "eventsorder", "emailstatusorder"和"emailstatuscol" JSON keys传递到/admin/cgi-bin/rpc/doReport/18的输入在被用于SQL查询前没有正确过滤，攻击者可以利用漏洞通过注入任意SQL代码操纵SQL查询。 0 McAfee Email and Web Security Appliance 5.x...

FreeBSD : rt42 -- denial-of-service attack via the email gateway (d1dfc4c7-8791-11e3-a371-6805ca0b3d42)

The RT development team reports : Versions of RT between 4.2.0 and 4.2.2 inclusive are vulnerable to a denial-of-service attack via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This vulnerabilit...

CVE-2013-7103

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a 1 TestFile XML element or the 2 hostname. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands...

CVE-2013-7104

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a 1 Command or 2 Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands...

Command injection

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a 1 Command or 2 Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands...

Command injection

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a 1 TestFile XML element or the 2 hostname. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands...

CVE-2013-7103

CVE-2013-7103 affects McAfee Email Gateway 7.6. Remote authenticated administrators can execute arbitrary commands by injecting shell metacharacters in the value attribute of a TestFile XML element or in the hostname. This is a command-injection in the administrative web interface and can be comb...

CVE-2013-7104

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a 1 Command or 2 Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands...

CVE-2013-7103

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a 1 TestFile XML element or the 2 hostname. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands...

CVE-2013-7104

McAfee Email Gateway 7.6 is affected by CVE-2013-7104, where remote authenticated administrators can execute arbitrary commands by supplying them in the value attribute of the Command or Script XML elements. This issue can be chained with CVE-2013-7092 to enable broader command execution. Connect...

CVE-2013-7092

Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the 1 eventscol, 2 eventid, 3 reason, 4 eventsorder, 5 emailstatusorder, or 6 emailstatuscol JSON keys...

CVE-2013-7092

Summary (CVE-2013-7092, -7103, -7104) : McAfee Email Gateway (MEG) 7.6.x is affected by multiple vulnerabilities across the administrative web interface. The primary issue for CVE-2013-7092 is unaffiltered input in the JSON keys (events_col, event_id, reason, events_order, emailstatus_order, emai...

CVE-2013-7092

Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the 1 eventscol, 2 eventid, 3 reason, 4 eventsorder, 5 emailstatusorder, or 6 emailstatuscol JSON keys...

McAfee Email Gateway 7.6 Command Execution / SQL Injection

--047d7bd6c5d012977c04eca87ee7 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable McAfee Email Gateway 7.6 multiple vulnerabilities http :// www . mcafee . com / us / products / email - gateway . aspx -- Has free trial Many instances of SQL injection were...