Hyper-V crash consistent Backups/Replicas due to McAfee mfehidk driver

Challenge If McAfee FS minifilter MFEHIDK driver is loaded into Windows kernel, then it doesn't allow any other driver to load at lower altitudes, it only allows other drivers to load at higher altitudes, supposedly because of proactive defense logic of McAfee Antivirus. Therefore Veeam CBT drive...

Multiple McAfee Products OS Command Injection Vulnerabilities

McAfee ESM is a security management product that performs real-time baseline activity calculations on all information collected and provides prioritized alerts before potential threats occur; McAfee ESMLM is a log collection, storage, and management product.McAfee ESMREC is an event receiver...

McAfee Agent Directory Traversal Vulnerability

McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. A directory traversal vulnerability exists in the remote log viewing feature in versions 5.x prior to MA 5.0.2. A...

McAfee Threat Intelligence Exchange Secondary Server Information Disclosure Vulnerability

McAfee Threat Intelligence Exchange TIE the United States McAfee McAfee company's set of unified threat defense system to provide security recovery and infection defense capabilities. The system provides comprehensive threat intelligence awareness, instant understanding of the trails of advanced...

CVE-2015-7310

McAfee Enterprise Security Manager ESM, Enterprise Security Manager/Log Manager ESMLM, and Enterprise Security Manager/Receiver ESMREC before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which...

Design/Logic Flaw

McAfee Enterprise Security Manager ESM, Enterprise Security Manager/Log Manager ESMLM, and Enterprise Security Manager/Receiver ESMREC before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which...

CVE-2015-7310

McAfee Enterprise Security Manager ESM, Enterprise Security Manager/Log Manager ESMLM, and Enterprise Security Manager/Receiver ESMREC before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which...

CVE-2015-7310

McAfee Enterprise Security Manager (ESM), ESMLM, and ESMREC are affected by CVE-2015-7310. Versions prior to 9.3.2MR18, 9.4.x prior to 9.4.2MR8, and 9.5.x prior to 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename when downloading a file, due to imp...

CVE-2015-7237

Directory traversal vulnerability in the remote log viewing functionality in McAfee Agent MA 5.x before 5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the remote log viewing functionality in McAfee Agent MA 5.x before 5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-7237

CVE-2015-7237 affects McAfee Agent (MA) 5.x prior to 5.0.2, where the remote log viewing feature is vulnerable to a directory traversal bug. The flaw could allow an attacker to obtain sensitive information via unspecified vectors in the remote logging UI/API. Affected component is the remote log ...

CVE-2015-7237

Directory traversal vulnerability in the remote log viewing functionality in McAfee Agent MA 5.x before 5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors...

Ashley Madison Hacker – An Insider Woman Employee?

"Ashley Madison was not hacked!" This is what declared by John McAfee, former founder of antivirus software company McAfee. So far everyone must be aware of Ashley Madison massive data breach. Last week, the hackers, who called themselves Impact Team, posted 10GB of personal data for tens of...

McAfee Application Control multiple security vulnerabilities

Restrictions bypass, unsafe libraries usage, privilege escalation...

SEC Consult SA-20150728-0 :: McAfee Application Control Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory 20150728-0 ======================================================================= title: McAfee Application Control Multiple Vulnerabilities product: McAfee Application Control vulnerable version: verified in version 6.1.3.353 fixed version: a fixe...

McAfee Firewall Enterprise DoS (SB10126)

The remote host has a version of McAfee Firewall Enterprise installed that is affected by a denial of service vulnerability due to an assertion flaw that occurs when handling TKEY queries. A remote attacker can exploit this, via a specially crafted request, to cause a REQUIRE assertion failure an...

McAfee Application Control Denial of Service Vulnerability

McAfee Application Control is a suite of program control software from the U.S.-based company McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. A denial of service vulnerability exists in McAfee...

McAfee Application Control Buffer Overflow Vulnerability

McAfee Application Control is a suite of program control software from the U.S.-based company McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. A buffer overflow vulnerability exists in McAfee...

McAfee Application Control Security Bypass Vulnerability

McAfee Application Control is a suite of program control software from the U.S.-based company McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. McAfee Application Control has a security vulnerability...

McAfee ePolicy Orchestrator SSL/TLS Certificate Validation Security Bypass Vulnerability (SB10120)

According to its self-reported version, the McAfee ePolicy Orchestrator ePO running on the remote host is affected by a security bypass vulnerability due to a failure to properly validate server and Certificate Authority names in X.509 certificates from SSL servers. A man-in-the-middle attacker, ...