Sign-up

ID

VAR-201005-0134


CVE

CVE-2010-2116


TITLE

McAfee Email Gateway of Web Vulnerability in which write permission is acquired in the interface

Trust: 0.8

sources: JVNDB: JVNDB-2010-004844

DESCRIPTION

The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do. Secure Mail is prone to a remote security vulnerability. ---------------------------------------------------------------------- Stay Compliant Alerts, Technical Descriptions, PoC, Links to patches, CVSS, CVE, Changelogs, Alternative Remediation Strategies, and much more provided in the Secunia Vulnerability Intelligence solutions Free Trial http://secunia.com/products/corporate/evm/trial/ ---------------------------------------------------------------------- TITLE: McAfee Email Gateway Web Access Security Bypass Vulnerability SECUNIA ADVISORY ID: SA39881 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/39881/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=39881 RELEASE DATE: 2010-05-24 DISCUSS ADVISORY: http://secunia.com/advisories/39881/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/39881/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=39881 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Nahuel Grisol\xeda has reported a vulnerability in McAfee Email Gateway, which can be exploited by malicious users to bypass certain security restrictions. The vulnerability is caused due to the Web Access interface performing insufficient checks for requests received from unprivileged users. This can be exploited by a user without write privileges to make configuration changes and e.g. add an administrative user. The vulnerability is reported in version 6.7.1. Other versions may also be affected. SOLUTION: Restrict access to the Web Access console to trusted users only. PROVIDED AND/OR DISCOVERED BY: Nahuel Grisol\xeda, Cybsec ORIGINAL ADVISORY: Cybsec: http://www.cybsec.com/vuln/cybsec_advisory_2010_0501_Ironmail_Advisory_Web_Access_Broken.pdf OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.07

sources: NVD: CVE-2010-2116 // JVNDB: JVNDB-2010-004844 // BID: 78930 // VULHUB: VHN-44721 // PACKETSTORM: 89844

AFFECTED PRODUCTS

vendor:mcafeemodel:secure mailscope:eqversion:6.7.1

Trust: 2.7

vendor:mcafeemodel:email gatewayscope:eqversion:6.7.1

Trust: 1.0

sources: BID: 78930 // JVNDB: JVNDB-2010-004844 // CNNVD: CNNVD-201005-423 // NVD: CVE-2010-2116

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2010-2116
value: MEDIUM

Trust: 1.0

NVD: CVE-2010-2116
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201005-423
value: MEDIUM

Trust: 0.6

VULHUB: VHN-44721
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2010-2116
severity: MEDIUM
baseScore: 6.5
vectorString: AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-44721
severity: MEDIUM
baseScore: 6.5
vectorString: AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-44721 // JVNDB: JVNDB-2010-004844 // CNNVD: CNNVD-201005-423 // NVD: CVE-2010-2116

PROBLEMTYPE DATA

problemtype:CWE-732

Trust: 1.1

problemtype:CWE-264

Trust: 0.9

sources: VULHUB: VHN-44721 // JVNDB: JVNDB-2010-004844 // NVD: CVE-2010-2116

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201005-423

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-201005-423

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2010-004844

PATCH
title:Top Pageurl:http://www.mcafee.com/us/business-home.aspx
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2010-004844

EXTERNAL IDS
db:NVDid:CVE-2010-2116
Trust: 2.8
db:SECTRACKid:1024018
Trust: 2.0
db:SECUNIAid:39881
Trust: 1.8
db:OSVDBid:64832
Trust: 1.7
db:VUPENid:ADV-2010-1239
Trust: 1.7
db:JVNDBid:JVNDB-2010-004844
Trust: 0.8
db:CNNVDid:CNNVD-201005-423
Trust: 0.7
db:BIDid:78930
Trust: 0.4
db:VULHUBid:VHN-44721
Trust: 0.1
db:PACKETSTORMid:89844
Trust: 0.1
sources:
            
            
            VULHUB: VHN-44721 // 
            
            
            
            BID: 78930 // 
            
            
            
            JVNDB: JVNDB-2010-004844 // 
            
            
            
            PACKETSTORM: 89844 // 
            
            
            
            CNNVD: CNNVD-201005-423 // 
            
            
            
            NVD: CVE-2010-2116

REFERENCES
url:http://www.cybsec.com/vuln/cybsec_advisory_2010_0501_ironmail_advisory_web_access_broken.pdf
Trust: 2.1
url:http://www.securitytracker.com/id?1024018
Trust: 2.0
url:http://osvdb.org/64832
Trust: 1.7
url:http://secunia.com/advisories/39881
Trust: 1.7
url:http://www.vupen.com/english/advisories/2010/1239
Trust: 1.7
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2116
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-2116
Trust: 0.8
url:http://secunia.com/advisories/39881/
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=39881
Trust: 0.1
url:http://secunia.com/products/corporate/evm/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/advisories/39881/#comments
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/products/corporate/evm/trial/
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            VULHUB: VHN-44721 // 
            
            
            
            BID: 78930 // 
            
            
            
            JVNDB: JVNDB-2010-004844 // 
            
            
            
            PACKETSTORM: 89844 // 
            
            
            
            CNNVD: CNNVD-201005-423 // 
            
            
            
            NVD: CVE-2010-2116

CREDITS
Unknown
Trust: 0.3
sources:
            
            
            BID: 78930

SOURCES
db:VULHUBid:VHN-44721
db:BIDid:78930
db:JVNDBid:JVNDB-2010-004844
db:PACKETSTORMid:89844
db:CNNVDid:CNNVD-201005-423
db:NVDid:CVE-2010-2116

LAST UPDATE DATE
2025-04-11T23:13:07.874000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-44721date:2020-01-10T00:00:00
db:BIDid:78930date:2010-05-28T00:00:00
db:JVNDBid:JVNDB-2010-004844date:2012-09-25T00:00:00
db:CNNVDid:CNNVD-201005-423date:2010-06-03T00:00:00
db:NVDid:CVE-2010-2116date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:VULHUBid:VHN-44721date:2010-05-28T00:00:00
db:BIDid:78930date:2010-05-28T00:00:00
db:JVNDBid:JVNDB-2010-004844date:2012-09-25T00:00:00
db:PACKETSTORMid:89844date:2010-05-24T07:13:46
db:CNNVDid:CNNVD-201005-423date:2010-05-28T00:00:00
db:NVDid:CVE-2010-2116date:2010-05-28T20:30:01.597