CVE-2009-3339 - Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attac

CVE-2009-3339

Summary

Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Per http://www.mcafee.com/us/enterprise/products/virtualization_security/email_and_web_security_appliance_virtual.html Experience McAfee Email and Web Security Appliance through the power of virtualization We’ve made it easier than ever to evaluate McAfee Email and Web Security Appliance, our email and web security appliance. Thanks to VMware virtualization technology, you can download a free 30-day software trial—with all of the features and functionality of the appliance. Install it on your server and experience uncompromising protection against spam, phishing, viruses, spyware, and more.

References

Vulnerable Configurations

cpe:2.3:a:mcafee:email_and_web_security_appliance:5.1:-:vmtrial:*:*:*:*:*
cpe:2.3:a:mcafee:email_and_web_security_appliance:5.1:-:vmtrial:*:*:*:*:*
cpe:2.3:h:mcafee:email_and_web_security_appliance:*:*:*:*:*:*:*:*
cpe:2.3:h:mcafee:email_and_web_security_appliance:*:*:*:*:*:*:*:*

CVSS

Base:	7.8 (as of 28-09-2009 - 04:00)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:N/A:N

refmap via4

misc	http://intevydis.com/vd-list.shtml
sectrack	1022829
secunia	36574

Last major update

28-09-2009 - 04:00

Published

24-09-2009 - 16:30

Last modified

28-09-2009 - 04:00