McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a (1) TestFile XML element or the (2) hostname. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands.

The remote host is running a version of McAfee Email Gateway (MEG) that is affected by multiple SQL injection and command execution vulnerabilities:

  - Multiple SQL injections vulnerabilities exist in the     administrative web interface. A remote, authenticated     attacker could potentially exploit these vulnerabilities     to run arbitrary SQL commands. (CVE-2013-7092)

  - A command execution vulnerability exists in the     administrative web interface due to a failure to     sanitize user input to the 'TestFile' XML element. A     remote, authenticated attacker could potentially exploit     this vulnerability to run arbitrary shell commands.
    (CVE-2013-7103)

  - A command execution vulnerability exists in the     administrative web interface due to a failure to     sanitize user input to the 'Command' and 'Script' XML     attribute. A remote, authenticated attacker could     potentially exploit this vulnerability to run arbitrary     shell commands. (CVE-2013-7104)

Detections

Analytics

CVE-2013-7103

high

Tenable Plugins

high