4327 matches found
CVE-2015-0922
CVE-2015-0922 affects McAfee ePolicy Orchestrator (ePO) versions before 4.6.9 and 5.x before 5.1.2. The issue is an information disclosure: the product uses the same secret key to encrypt password data across different customer installations, allowing an attacker with knowledge of the encrypted p...
CVE-2015-0921
XML external entity XXE vulnerability in the Server Task Log in McAfee ePolicy Orchestrator ePO before 4.6.9 and 5.x before 5.1.2 allows remote authenticated users to read arbitrary files via the conditionXML parameter to the taskLogTable to orionUpdateTableFilter.do...
McAfee ePolicy Orchestrator 'conditionXML' Parameter XML External Entity Injection Vulnerability
McAfee ePolicy Orchestrator ePO is an industry-leading systems security management solution that helps organizations effectively defend against a wide range of malicious threats and attacks. An XML external entity injection vulnerability exists in the McAfee ePolicy Orchestrator 'conditionXML'...
McAfee Email Gateway - Three SSLv3 Vulnerabilities
McAfee Email Gateway is vulnerable to one or more of the three Open Secure Sockets Layer OpenSSL 3.0 SSLv3 vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
McAfee Email Gateway - Bash Shellshock Code Injection Exploit
A number of security vulnerabilities have been identified in the bash SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
McAfee ePolicy Orchestrator Authenticated XXE Credential Exposure Exploit
This Metasploit module will exploit an authenticated XXE vulnerability to read the keystore.properties off of the filesystem. This properties file contains an encrypted password that is set during installation. What is interesting about this password is that it is set as the same password as the...
McAfee Email Gateway Version
This script performs SSH based detection of McAfee Email Gateway SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
McAfee Email Gateway - OpenSSL vulnerabilities patched in McAfee products
McAfee Email Gateway is vulnerable to a batch of OpenSSL vulnerabilities SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
McAfee ePolicy Orchestrator Authenticated XXE Credentials Exposure
This module will exploit an authenticated XXE vulnerability to read the keystore.properties off of the filesystem. This properties file contains an encrypted password that is set during installation. What is interesting about this password is that it is set as the same password as the database 's...
McAfee AntiVirus ZIP Archive Virus Detection Bypass attack - Ver2 (CVE-2004-0932)
A security bypass vulnerability has been reported in multiple products. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
Beware: Fake 'The Interview' App Affects Android Users
"The Interview", the controversial North Korean-baiting film which appeared to be the root cause of the cyber mishap occurred at Sony Pictures Entertainment that threatened terror attack at theaters showing the movie, now threatens to expose users of Android phones to a malware attack. Since its...
McAfee Next Generation Firewall GNU Bash Code Injection (SB10085) (Shellshock)
The remote host has a version of McAfee Next Generation Firewall NGFW installed that is affected by a command injection vulnerability in GNU Bash known as Shellshock. The vulnerability is due to the processing of trailing strings after function definitions in the values of environment variables...
McAfee Web Gateway GNU Bash Code Injection (SB10085) (Shellshock)
The remote host has a version of McAfee Web Gateway MWG installed that is affected by a command injection vulnerability in GNU Bash known as Shellshock. The vulnerability is due to the processing of trailing strings after function definitions in the values of environment variables. This allows a...
McAfee Email Gateway GNU Bash Code Injection (SB10085) (Shellshock)
The remote host has a version of McAfee Email Gateway MEG installed that is affected by a command injection vulnerability in GNU Bash known as Shellshock. The vulnerability is due to the processing of trailing strings after function definitions in the values of environment variables. This allows ...
McAfee EEFF / FRP Predictable Salt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2014-008 Products: McAfee Endpoint Encryption for Files and Folders EEFF McAfee File and Removable Media Protection FRP Vendor: McAfee, Inc. Affected Versions: EEFF 3.2.x, 4.0.x, 4.1.x, 4.2.x; FRP 4.3.0.x Tested Versions: 4.2.0.164...
CVE-2014-8536
McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to obtain sensitive information by reading unspecified error messages...
CVE-2014-8537
McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to obtain sensitive information by reading the logs...
CVE-2014-8534
Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to cause a denial of service via a crafted value in the domain field...