CVE-2013-7103

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a (1) TestFile XML element or the (2) hostname.  NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
mcafeeemail_gateway
7.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/100581
http://packetstormsecurity.com/files/124277/McAfee-Email-Gateway-7.6-Command-Execution-SQL-Injection.html
http://seclists.org/fulldisclosure/2013/Dec/18
http://www.securityfocus.com/bid/64150
https://exchange.xforce.ibmcloud.com/vulnerabilities/90162
http://osvdb.org/100581
http://packetstormsecurity.com/files/124277/McAfee-Email-Gateway-7.6-Command-Execution-SQL-Injection.html
http://seclists.org/fulldisclosure/2013/Dec/18
http://www.securityfocus.com/bid/64150
https://exchange.xforce.ibmcloud.com/vulnerabilities/90162