McAfee Email Gateway < 6.7.2 Hotfix 2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/39242/info McAfee Email Gateway formerly IronMail is prone to multiple vulnerabilities, including: A local privilege-escalation vulnerability A denial-of-service vulnerability. Multiple cross-site scripting vulnerabilities An information-disclosure...

McAfee Email Gateway (formerly IronMail) - Cross-Site Scripting

McAfee Email Gateway formerly IronMail - Cross-Site Scripting Advisory Name: Multiple Reflected Cross-Site Scripting XSS in McAfee Email Gateway formerly IronMail Vulnerability Class: Reflected Cross-Site Scripting XSS Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail...

McAfee Email Gateway (formerly IronMail) - Cross-Site Scripting

Advisory Name: Multiple Reflected Cross-Site Scripting XSS in McAfee Email Gateway formerly IronMail Vulnerability Class: Reflected Cross-Site Scripting XSS Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1 Loca...

McAfee Email Gateway (formerly IronMail) - Internal Information Disclosure

McAfee Email Gateway formerly IronMail - Internal Information Disclosure Advisory Name: Internal Information Disclosure in McAfee Email Gateway formerly IronMail Vulnerability Class: Information Disclosure Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affecte...

McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation

McAfee Email Gateway formerly IronMail - Local Privilege Escalation Advisory Name: Local Privilege Escalation in McAfee Email Gateway formerly IronMail Vulnerability Class: Local Privilege Escalation Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected...

McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation

Advisory Name: Local Privilege Escalation in McAfee Email Gateway formerly IronMail Vulnerability Class: Local Privilege Escalation Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1 Local / Remote: Local Severit...

McAfee Email Gateway (formerly IronMail) - Denial of Service

Advisory Name: Denial of Service in McAfee Email Gateway formerly IronMail Vulnerability Class: Denial of Service Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 / Apache-Coyote 1.1 Local / Remote: Local Severity: Medium – CVSS:...

Crack McAfee password-vulnerability warning-the black bar safety net

Just into the company took over the work, the company installed the McAfee software, the C disk is protected, and want to install the software are difficult to Ah, that bird did not say the password, which is difficult for yourself. Want to remove software delete No, I want to install the also...

Remember Aurora–and Other Botnets

Last night my attention was drawn to a couple of blog entries relating to Google and the attacks they fell victim to earlier this year. These attacks were eventually labeled as “Operation Aurora” by McAfee based upon the presence of the “aurora” keyword embedded within some of the malware. First...

Exploit Code Published for Latest IE Zero-Day

Using obvious clues from a McAfee blog post, an Israeli hacker was able to pinpoint the latest Internet Explorer zero-day vulnerability and create working exploit code. The exploit code, which provides a clear roadmap to launch drive-by download attacks against IE 6 and IE 7 users, is being fitte...

Perforce Socket Hijacking Vulnerability

Perforce is prone to a vulnerability that allows attackers to hijack sockets. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

NSOADV-2010-004: McAfee LinuxShield remote/local code execution

NSOADV-2010-004: McAfee LinuxShield remote/local code execution 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111 111001 111111111 0 10 1111 0 11 11 111111111 1 1101 10 00111 ...

McAfee LinuxShield privilege escalation

nailsd TCP/65443 service allows authenticated user to manipulate files with nailsd permissions...

McAfee LinuxShield remote/local Code Execution Vulnerability

Exploit for unknown platform in category remote exploits ============================================================ McAfee LinuxShield remote/local Code Execution Vulnerability ============================================================ Title: McAfee LinuxShield remote/local code execution...

McAfee LinuxShield Login Username Enumeration

McAfee LinuxShield is installed on the remote host. The installed version of this software fails to respond with consistent error messages when a user attempts to login with existing and non-existing accounts. A remote, unauthenticated attacker may exploit this vulnerability to enumerate valid...

McAfee Subscription Manager ActiveX Stack Buffer Overflow (CVE-2006-3961)

McAfee Corporation is a major vendor of numerous anti-virus, network, and desktop security products which are deployed in consumer as well as enterprise environments. The applications use several common components which are installed with the application. One of these components is the McAfee...

McAfee WebShield SMTP Bounce Message Format String (CVE-2006-0559)

McAfee WebShield SMTP is an application designed to scan incoming SMTP messages for viruses before forwarding them to their destinations. Since WebShield may be set up to work independently of any real SMTP servers, it can act as a partially-featured SMTP server on its own, with respect to...

McAfee ePolicy Orchestrator Framework Services Log Handling Format String (CVE-2008-1357)

McAfee Corporation is a major vendor of numerous anti-virus, network, and desktop security products which are deployed in consumer as well as enterprise environments. McAfee ePolicy Orchestrator is a central security management system to manage security policy, assess and enforce policy, notify...

Google Attackers Used Internet Explorer Zero Day

Several of the companies victimized in the attack that hit Google and dozens of other companies recently were compromised through the use of a new, unpatched vulnerability in Internet Explorer, experts say. The flaw was used in a sophisticated attack that included victims receiving targeted email...

McAfee Multiple Products LHA Type-2 File Handling Buffer Overflow (CVE-2005-0644)

McAfee, formally Network Associates Incorporated, produces a number of popular anti-virus products for both Enterprise and Desktop consumer use. These products are capable of detecting malicious content not only within regular files but also within compressed archives such as LHA archives. There...