Menu

Search for hundreds of thousands of exploits

"McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation"

Author

Exploit author

"Nahuel Grisolia"

Platform

Exploit platform

freebsd

Release date

Exploit published date

2010-04-06

Download file

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
Advisory Name: Local Privilege Escalation in McAfee Email Gateway (formerly IronMail)
Vulnerability Class: Local Privilege Escalation
Release Date: Tue Apr 6, 2010
Affected Applications: Secure Mail (Ironmail) ver.6.7.1
Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1
Local / Remote: Local
Severity: Medium - CVSS: 6.4 (AV:L/AC:L/Au:S/C:P/I:C/A:C)
Researcher: Nahuel Grisolía

Vendor Status: Official Patch Released. Install McAfee Email Gateway 6.7.2 Hotfix 2.
Reference to Vulnerability Disclosure Policy: http://www.cybsec.com/vulnerability_policy.pdf

Vulnerability Description:
Ironmail was found to allow any CLI user to run arbitrary commands with Admin rights, due to
improper handling of environment variables.

Download:
https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/12090.pdf (cybsec_advisory_2010_0404.pdf)
Release Date Title Type Platform Author
2020-12-02 "aSc TimeTables 2021.6.2 - Denial of Service (PoC)" local windows "Ismael Nava"
2020-12-02 "Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality" webapps php "Mufaddal Masalawala"
2020-12-02 "Ksix Zigbee Devices - Playback Protection Bypass (PoC)" remote multiple "Alejandro Vazquez Vazquez"
2020-12-02 "Mitel mitel-cs018 - Call Data Information Disclosure" remote linux "Andrea Intilangelo"
2020-12-02 "Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile" webapps multiple "Shahrukh Iqbal Mirza"
2020-12-02 "DotCMS 20.11 - Stored Cross-Site Scripting" webapps multiple "Hardik Solanki"
2020-12-02 "ChurchCRM 4.2.0 - CSV/Formula Injection" webapps multiple "Mufaddal Masalawala"
2020-12-02 "ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)" webapps multiple "Mufaddal Masalawala"
2020-12-02 "NewsLister - Authenticated Persistent Cross-Site Scripting" webapps multiple "Emre Aslan"
2020-12-02 "IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path" local windows "Manuel Alvarez"
Release Date Title Type Platform Author
2020-04-06 "pfSense 2.4.4-P3 - 'User Manager' Persistent Cross-Site Scripting" webapps freebsd "Matthew Aberegg"
2020-02-11 "OpenSMTPD 6.4.0 < 6.6.1 - Local Privilege Escalation + Remote Code Execution" remote freebsd "Marco Ivaldi"
2019-12-30 "FreeBSD-SA-19:02.fd - Privilege Escalation" local freebsd "Karsten König"
2019-12-30 "FreeBSD-SA-19:15.mqueuefs - Privilege Escalation" local freebsd "Karsten König"
2019-07-10 "FreeBSD 12.0 - 'fd' Local Privilege Escalation" local freebsd gr4yf0x
2016-01-25 "FreeBSD SCTP ICMPv6 - Error Processing" dos freebsd ptsecurity
2015-01-29 "FreeBSD - Multiple Vulnerabilities" dos freebsd "Core Security"
2013-10-04 "FreeBSD 9.0 - Intel SYSRET Kernel Privilege Escalation" local freebsd CurcolHekerLink
2013-06-26 "FreeBSD 9 - Address Space Manipulation Privilege Escalation (Metasploit)" local freebsd Metasploit
2013-06-21 "FreeBSD 9.0 < 9.1 - 'mmap/ptrace' Local Privilege Escalation" local freebsd Hunger
Release Date Title Type Platform Author
2012-11-26 "Websense Proxy - Filter Bypass" dos multiple "Nahuel Grisolia"
2012-04-09 "Dolibarr ERP/CRM < 3.2.0 / < 3.1.1 - OS Command Injection" webapps php "Nahuel Grisolia"
2010-12-09 "VMware Tools - Update OS Command Injection" remote multiple "Nahuel Grisolia"
2010-10-13 "Oracle Virtual Server Agent - Command Injection" remote unix "Nahuel Grisolia"
2010-05-19 "McAfee Email Gateway - Web Administration Broken Access Control" webapps freebsd "Nahuel Grisolia"
2010-05-19 "McAfee Email Gateway 6.7.1 - 'systemWebAdminConfig.do' Remote Security Bypass" remote windows "Nahuel Grisolia"
2010-04-22 "Cacti 0.8.7e - OS Command Injection" webapps php "Nahuel Grisolia"
2010-04-22 "Cacti 0.8.7e - SQL Injection" webapps php "Nahuel Grisolia"
2010-04-06 "McAfee Email Gateway (formerly IronMail) - Internal Information Disclosure" local freebsd "Nahuel Grisolia"
2010-04-06 "McAfee Email Gateway (formerly IronMail) - Denial of Service" dos hardware "Nahuel Grisolia"
2010-04-06 "McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation" local freebsd "Nahuel Grisolia"
2010-04-06 "McAfee Email Gateway (formerly IronMail) - Cross-Site Scripting" webapps hardware "Nahuel Grisolia"
2010-04-06 "McAfee Email Gateway < 6.7.2 Hotfix 2 - Multiple Vulnerabilities" dos windows "Nahuel Grisolia"
2010-03-18 "ManageEngine ServiceDesk Plus 7.6 - woID SQL Injection" webapps jsp "Nahuel Grisolia"
2010-03-16 "OSSIM 2.2 - Multiple Vulnerabilities" webapps php "Nahuel Grisolia"
2010-03-16 "eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities" webapps php "Nahuel Grisolia"
2010-03-02 "IBM Lotus Domino 7.0.2 - 'readme.nsf' Cross-Site Scripting" remote multiple "Nahuel Grisolia"
2010-02-09 "osTicket 1.6 RC5 - Multiple Vulnerabilities" webapps php "Nahuel Grisolia"
2010-02-04 "KnowGate hipergate 4.0.12 - Multiple Cross-Site Scripting Vulnerabilities" webapps jsp "Nahuel Grisolia"
2010-02-03 "Hipergate 4.0.12 - Multiple Vulnerabilities" webapps jsp "Nahuel Grisolia"
2009-12-16 "OSSIM 2.1.5 - Arbitrary File Upload" webapps php "Nahuel Grisolia"
2009-12-16 "OSSIM 2.1.5 - SQL Injection" webapps php "Nahuel Grisolia"
2009-12-16 "OSSIM 2.1.5 - Remote Command Execution" webapps php "Nahuel Grisolia"
2009-12-04 "Achievo 1.4.2 - Arbitrary File Upload" webapps php "Nahuel Grisolia"
2009-12-04 "Achievo 1.4.2 - Persistent Cross-Site Scripting" webapps php "Nahuel Grisolia" 
import requests
response = requests.get('http://127.0.0.1:8181?format=json')

For full documentation follow the link above

Cipherscan. Find out which SSL ciphersuites are supported by a target.

Cipher Protocols Sigalg Trusted

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Host WAF detected