McAfee Email Gateway 6.7.1 - 'systemWebAdminConfig.do' Remote Security Bypass

source: https://www.securityfocus.com/bid/40255/info McAfee Email Gateway is prone to a security-bypass vulnerability because the web-based interface fails to properly perform user-profile checks. Attackers can exploit this issue to bypass certain security restrictions to edit property and...

McAfee Email Gateway - Web Administration Broken Access Control

Advisory Name:Web Administration Broken Access Control in McAfee Email Gateway formerly IronMail Vulnerability Class: Broken Access Control Release Date: May 19, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1 Local / Remote: Local...

McAfee Email Gateway 6.7.2 Hotfix 2更新修复多个安全漏洞

BUGTRAQ ID: 39242 McAfee Email Gateway之前名为IronMail，是企业级的硬件邮件网关和管理平台。 McAfee Email Gateway的6.7.2 Hotfix 2之前版本中的多个漏洞允许本地用户导致拒绝服务、读取敏感信息、获得权限提升，或允许远程攻击者执行跨站脚本攻击。 1 处理CLI命令时的错误可能耗尽可用的系统资源。 2 由于没有正确地过滤提交给admin/queuedMessage.do页面的queueMsgType和QtnType参数，远程攻击者可以通过提交恶意请求执行跨站脚本攻击。 3...

McAfee Email Gateway 6.7.2 Hotfix 2 - Multiple Vulnerabilities

McAfee Email Gateway 6.7.2 Hotfix 2 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/39242/info McAfee Email Gateway formerly IronMail is prone to multiple vulnerabilities, including: A local privilege-escalation vulnerability A denial-of-service vulnerability. Multiple...

McAfee Email Gateway < 6.7.2 Hotfix 2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/39242/info McAfee Email Gateway formerly IronMail is prone to multiple vulnerabilities, including: A local privilege-escalation vulnerability A denial-of-service vulnerability. Multiple cross-site scripting vulnerabilities An information-disclosure...

McAfee Email Gateway (formerly IronMail) - Denial of Service

McAfee Email Gateway formerly IronMail - Denial of Service Advisory Name: Denial of Service in McAfee Email Gateway formerly IronMail Vulnerability Class: Denial of Service Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 /...

McAfee Email Gateway (formerly IronMail) - Internal Information Disclosure

Advisory Name: Internal Information Disclosure in McAfee Email Gateway formerly IronMail Vulnerability Class: Information Disclosure Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1 Local / Remote: Local...

McAfee Email Gateway (formerly IronMail) - Cross-Site Scripting

McAfee Email Gateway formerly IronMail - Cross-Site Scripting Advisory Name: Multiple Reflected Cross-Site Scripting XSS in McAfee Email Gateway formerly IronMail Vulnerability Class: Reflected Cross-Site Scripting XSS Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail...

McAfee Email Gateway (formerly IronMail) - Cross-Site Scripting

Advisory Name: Multiple Reflected Cross-Site Scripting XSS in McAfee Email Gateway formerly IronMail Vulnerability Class: Reflected Cross-Site Scripting XSS Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1 Loca...

McAfee Email Gateway (formerly IronMail) - Internal Information Disclosure

McAfee Email Gateway formerly IronMail - Internal Information Disclosure Advisory Name: Internal Information Disclosure in McAfee Email Gateway formerly IronMail Vulnerability Class: Information Disclosure Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affecte...

McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation

McAfee Email Gateway formerly IronMail - Local Privilege Escalation Advisory Name: Local Privilege Escalation in McAfee Email Gateway formerly IronMail Vulnerability Class: Local Privilege Escalation Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected...

McAfee Email Gateway (formerly IronMail) - Denial of Service

Advisory Name: Denial of Service in McAfee Email Gateway formerly IronMail Vulnerability Class: Denial of Service Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1 Local / Remote: Local Severity: Medium – CVSS:...

McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation

Advisory Name: Local Privilege Escalation in McAfee Email Gateway formerly IronMail Vulnerability Class: Local Privilege Escalation Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1 Local / Remote: Local Severit...

McAfee Products Security Bypass Vulnerability (Windows)

This host is installed with McAfee products and are prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmcafeeprdtssecbypassvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ McAfee Products Security Bypass Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2009...

FormMail Detection

The FormMail Script was found at this port. FormMail is a generic HTML form to e-mail gateway that parses the results of any form and sends them to the specified users. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...

ClamAV UPack拒绝服务和cli_url_canon()栈溢出漏洞

BUGTRAQ ID: 34446 CVECAN ID: CVE-2009-1371,CVE-2009-1372 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV的libclamav/phishcheck.c文件中的cliurlcanon函数存在栈溢出漏洞，远程攻击者可以通过提交恶意的URL来触发这个溢出，导致执行任意代码。 如果用户使用ClamAV扫描到了UPack编码的畸形文件的话，libclamav/others.h文件的CLIISCONTAINED宏中的安全漏洞可能导致应用程序崩溃。 ClamAV 0.95.1 ClamAV...

[SA17184] Clam AntiVirus OLE2 Unpacker Potential Denial of Service

TITLE: Clam AntiVirus OLE2 Unpacker Potential Denial of Service SECUNIA ADVISORY ID: SA17184 VERIFY ADVISORY: http://secunia.com/advisories/17184/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/ DESCRIPTION: Marcin Owsian...

iDEFENSE Security Advisory 07.14.05: Sophos Anti-Virus Zip File Handling DoS Vulnerability

Sophos Anti-Virus Zip File Handling DoS Vulnerability iDEFENSE Security Advisory 07.14.05 www.idefense.com/application/poi/display?id=283&type=vulnerabilities July 14, 2005 I. BACKGROUND Sophos Small Business Suite includes the Sophos PureMessage Small Business Edition, combining virus and spam...

Clearswift MIMEsweeper Manager Console Detection

The remote host appears to be running MIMEsweeper for SMTP, connections are allowed to the web MIMEsweeper manager console. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. C Tenable Network Security, Inc...

Kinesphere Corporation Exchange POP3 4.0/5.0 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/10180/info It has been reported that Exchange POP3 e-mail gateway is prone to a remote buffer overflow vulnerability that may allow an attacker to execute arbitrary code on a vulnerable system. This issue could allow an attacker to gain unauthorized acces...