PT-2016-1641 · Mcafee · Mcafee Email Gateway

Publicado 2016-04-06 · Atualizado 2016-05-19 · CVE-2016-3969

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions McAfee Email Gateway versions 7.6.x through 7.6.403

Description The issue is related to a cross-site scripting (XSS) vulnerability. It occurs when File Filtering is enabled with the action set to ESERVICES:REPLACE, allowing remote attackers to inject arbitrary web script or HTML via an attachment in a blocked email. This can be exploited by sending a specially crafted email message, potentially enabling an attacker to inject malicious code.

Recommendations For McAfee Email Gateway versions 7.6.x through 7.6.403, update to version 7.6.404 or later to resolve the issue. As a temporary workaround, consider disabling the File Filtering feature with the ESERVICES:REPLACE action until a patch is applied. Restrict access to email attachments to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2016-00953

CVE-2016-3969

Produtos afetados

Mcafee Email Gateway

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-3969 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10153 · Aviso do Fabricante
• https://kc.mcafee.com/corporate/index?page=content&id=SB10153 · Nota
• http://securitytracker.com/id/1035470 · Nota
• https://osv.dev/vulnerability/CVE-2016-3969 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00953 · Nota de Segurança