CVE-2012-4582

McAfee EWS 5.x (before 5.5 Patch 6) and 5.6 (before Patch 3), and McAfee MEG 7.0 (before Patch 1) are affected by CVE-2012-4582. The vulnerability allows remote authenticated users to reset the passwords of arbitrary administrative accounts via unspecified vectors. The impact is administrative cr...

CVE-2009-5118

CVE-2009-5118 affects McAfee VirusScan Enterprise; untrusted search path allows local privilege escalation via a Trojan DLL when scanning a document on a remote share, in versions before 8.7i. The vulnerability stems from insecure DLL search behavior (lookups in the current working directory). Op...

CVE-2012-4596

Directory traversal vulnerability in McAfee Email Gateway MEG 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access restrictions and download arbitrary files via a crafted URL...

CVE-2011-5101

The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam...

CVE-2012-4599

McAfee SmartFilter Administration (and Bess Edition) prior to 4.2.1.01 exposes unauthenticated access to the JBoss RMI interface, enabling remote code execution via a crafted .war file. Affected product: McAfee SmartFilter Administration. Root cause: lack of authentication on the RMI interface. I...

CVE-2012-4584

McAfee products affected: Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3; McAfee Email Gateway (MEG) 7.0 before Patch 1. The issue: backups are not properly encrypted, enabling remote authenticated users to read a backup file and obtain sensitive data such as password ...

CVE-2010-5143

CVE-2010-5143 affects McAfee VirusScan Enterprise prior to 8.8. Local users with administrative privileges can disable the product by triggering an unspecified Metasploit Framework module. Multiple scanners (NVD, Red Hat, Nessus/OpenVAS entries) corroborate a local-privilege-escalation vector lea...

CVE-2012-4586

McAfee Email and Web Security EWS 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway MEG 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file...

CVE-2012-4583

McAfee Email and Web Security (EWS) 5.x up to 5.5 Patch 6 and 5.6 up to Patch 3, and McAfee Email Gateway (MEG) 7.0 up to Patch 1 are affected. The issue lets remote authenticated users obtain other users’ session tokens by navigating within the Dashboard, due to a session-token exposure in the U...

CVE-2009-5117

The CVE-2009-5117 entry concerns McAfee Host Data Loss Prevention (DLP) with its Web Post Protection feature. Versions 3.x prior to 3.0.100.10 and 9.x prior to 9.0.0.422, when HTTP Capture mode is enabled, may let local users obtain sensitive information from web traffic by reading unspecified fi...

CVE-2010-3496

McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection...

CVE-2012-4599

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation RMI interface, which allows remote attackers to execute arbitrary code via a crafted .war file...

CVE-2012-4590

CVE-2012-4590 describes multiple XSS vulnerabilities in the About.aspx page of the Portal in McAfee Enterprise Mobility Manager (EMM) prior to version 10.0. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Connection HTTP variables. Exploitati...

CVE-2012-4587

McAfee Enterprise Mobility Manager EMM Agent before 4.8 and Server before 10.1, when one-time provisioning OTP mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a...

CVE-2012-4594

McAfee ePolicy Orchestrator ePO 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL...

CVE-2012-4597

Cross-site scripting XSS vulnerability in McAfee Email and Web Security EWS 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway MEG 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management...

CVE-2012-4594

CVE-2012-4594 affects McAfee ePolicy Orchestrator (ePO) version 4.6.1 and earlier. The issue allows remote authenticated users to bypass access restrictions and read sensitive information from arbitrary reporting panels by modifying an ID value in a console URL. The provided documents do not spec...

CVE-2012-4593

McAfee Application Control and Change Control 5.1.x and 6.0.0 are affected by an authentication bypass vulnerability. The issue arises because the product does not enforce an intended password requirement in certain situations involving attributes of the password file, allowing local users to byp...

CVE-2009-5117

The Web Post Protection feature in McAfee Host Data Loss Prevention DLP 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files...

McAfee will prevent vehicles from becoming vulnerable to Car Virus

Vehicles are becoming more and more reliant on computers for efficiency, safety systems, and infotainment systems. Most vehicles on the market today use throttle-by-wire systems, where the onboard computer controls the throttle of the vehicle. Toyota has had problems in the past with so-called...