McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a (1) Command or (2) Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands.
References
Configurations
History
No history.
Information
Published : 2013-12-14 17:21
Updated : 2024-02-28 12:00
NVD link : CVE-2013-7104
Mitre link : CVE-2013-7104
CVE.ORG link : CVE-2013-7104
JSON object : View
Products Affected
mcafee
- email_gateway
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')