PT-2016-1641 · Mcafee · Mcafee Email Gateway

Published 2016-04-06 · Updated 2016-05-19 · CVE-2016-3969

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions McAfee Email Gateway versions 7.6.x through 7.6.403

Description The issue is related to a cross-site scripting (XSS) vulnerability. It occurs when File Filtering is enabled with the action set to ESERVICES:REPLACE, allowing remote attackers to inject arbitrary web script or HTML via an attachment in a blocked email. This can be exploited by sending a specially crafted email message, potentially enabling an attacker to inject malicious code.

Recommendations For McAfee Email Gateway versions 7.6.x through 7.6.403, update to version 7.6.404 or later to resolve the issue. As a temporary workaround, consider disabling the File Filtering feature with the ESERVICES:REPLACE action until a patch is applied. Restrict access to email attachments to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2016-00953

CVE-2016-3969

Affected Products

Mcafee Email Gateway

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-3969 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10153 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3969 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00953 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10153 · Note
• http://securitytracker.com/id/1035470 · Note