CVE-2012-4599

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation RMI interface, which allows remote attackers to execute arbitrary code via a crafted .war file...

CVE-2012-4586

CVE-2012-4586 affects McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6, and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1. The issue: remote authenticated users can cause a file request to be processed with root privileges, bypassing intended permission checks. T...

CVE-2009-5116

CVE-2009-5116 affects McAfee LinuxShield 1.5.1 and earlier. The vulnerability arises from improper client authentication, enabling remote authenticated users to obtain Admin access to the statistics server by leveraging a client account. Related advisories (NVD/Red Hat/Nessus entry) corroborate a...

CVE-2012-4587

McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and EMM Server before 10.1, when one‑time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records that can let remote attackers spoof the EMM server and discover user passwords (demonstrated on iOS). No patch/ver...

CVE-2012-4592

CVE-2012-4592 affects the McAfee Enterprise Mobility Manager (EMM) Portal prior to 10.0. The vulnerability is that the ASP.NET session cookie is not marked as Secure in HTTPS sessions, enabling attackers to capture the cookie by intercepting its transmission over HTTP. The connected documents rep...

CVE-2012-4598

The CVE-2012-4598 issue affects McAfee Virtual Technician (MVT) ActiveX control (MVTControl) prior to version 6.4 and related ePO-MVT components. The vulnerability arises from an unspecified ActiveX control that can be abused via a crafted web page to execute arbitrary code or cause a denial of s...

CVE-2012-4599

McAfee SmartFilter Administration (and Bess Edition) prior to 4.2.1.01 exposes unauthenticated access to the JBoss RMI interface, enabling remote code execution via a crafted .war file. Affected product: McAfee SmartFilter Administration. Root cause: lack of authentication on the RMI interface. I...

CVE-2012-4582

McAfee EWS 5.x (before 5.5 Patch 6) and 5.6 (before Patch 3), and McAfee MEG 7.0 (before Patch 1) are affected by CVE-2012-4582. The vulnerability allows remote authenticated users to reset the passwords of arbitrary administrative accounts via unspecified vectors. The impact is administrative cr...

CVE-2012-4586

McAfee Email and Web Security EWS 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway MEG 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file...

CVE-2010-3496

Affected software: McAfee VirusScan Enterprise 8.5i and 8.7i. Vulnerability cause: improper interaction with the processing of hcp:// URLs by the Microsoft Help and Support Center, per CVE-2010-3496. Impact: remote attackers could execute arbitrary code via malware that is detected by the product...

CVE-2012-4584

McAfee Email and Web Security EWS 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway MEG 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as...

CVE-2012-4597

The CVE-2012-4597 entry describes a cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 (through Patch 6) and 5.6 (through Patch 3), and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1. The issue enables remote attackers to inject arbitrary web script or HTML via vector...

CVE-2012-4597

Cross-site scripting XSS vulnerability in McAfee Email and Web Security EWS 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway MEG 7.0.0 and 7.0.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Management...

CVE-2012-4596

CVE-2012-4596 is a directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 . The issue allows remote authenticated users to bypass access restrictions and download arbitrary files via a crafted URL, potentially impacting confidentiality. The documents explicitly describe t...

CVE-2012-4592

The Portal in McAfee Enterprise Mobility Manager EMM before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2012-4590

Multiple cross-site scripting XSS vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the 1 User Agent or 2 Connection variable...

CVE-2011-5100

CVE-2011-5100 affects the McAfee Firewall Reporter web interface (pre-5.1.0.13). The root cause is improper cookie authentication, allowing remote attackers to obtain access and disable anti-virus functionality via an HTTP request. The vulnerability is reflected in NVD as CVSSv2 base score 7.5 (H...

CVE-2012-4585

CVE-2012-4585 affects McAfee Email and Web Security (EWS) 5.x prior to 5.5 Patch 6 and 5.6 prior to Patch 3, and McAfee Email Gateway (MEG) 7.0 prior to Patch 1. The vulnerability allows remote authenticated users to read arbitrary files via a crafted URL. The available documents do not provide e...

CVE-2012-4584

McAfee products affected: Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3; McAfee Email Gateway (MEG) 7.0 before Patch 1. The issue: backups are not properly encrypted, enabling remote authenticated users to read a backup file and obtain sensitive data such as password ...

CVE-2011-5101

The CVE-2011-5101 entry concerns the Rumor technology in McAfee SaaS Endpoint Protection (pre-5.2.4). The available documents specify that this component allows remote attackers to relay email messages via unspecified vectors, demonstrated by relaying spam. The exact affected versions are McAfee ...