cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Critical hole in McAfee products

Jump to solution

Critical hole in McAfee products still open after more than 180 days

http://www.h-online.com/security/news/item/Critical-hole-in-McAfee-products-still-open-after-more-th...

Does this affect home users?

And why hasn't it been addressed?


1 Solution

Accepted Solutions
Reliable Contributor Hayton
Reliable Contributor
Report Inappropriate Content
Message 5 of 7

Re: Critical hole in McAfee products

Jump to solution

Now fixed

-----------------------------------

McAfee Labs Security Advisory

-----------------------------

MTIS12-009 - January 17, 2012

Executive Summary

Since the last McAfee(R) Labs Security Advisory (January 13),

the following noteworthy events have taken place:

McAfee has published KB73910, covering a Remote Code Execution vulnerability in McAfee SaaS Endpoint Protection.

See

https://kc.mcafee.com/corporate/index?page=content&id=KB73910

Solution

McAFee addressed this issue on July 28, 2011. See McAfee Security Bulletin SB10016.

https://kc.mcafee.com/corporate/index?page=content&id=SB10016

Description

This update fixes two bugs in ActiveX controls that the SaaS Endpoint Protection product uses to do its normal operations.

Message was edited by: Hayton on 18/01/12 02:40:34 GMT
6 Replies
Reliable Contributor Hayton
Reliable Contributor
Report Inappropriate Content
Message 2 of 7

Re: Critical hole in McAfee products

Jump to solution

All I can say about this is that it only affects SaaS products, in other words the problem is confined to Business users with the Enterprise version. Home users, for once, don't have to worry about it.

Re: Critical hole in McAfee products

Jump to solution

Thanks, Hayton.

Good to know us Home users are safe.

Re: Critical hole in McAfee products

Jump to solution

Hello there, Red Dawn. McAfee is aware of this article. It is in reference to a security issue with McAfee Total Protection Service, our SaaS AV hosted product, which was fixed in a patch released in August 2011. McAfee is releasing another patch later this week that will remove the functionality altogether (which was made obsolete by the August patch). As this is a hosted solution, the patch process will be automatic. Again, the August 2011 patch mitigated the issue. Thanks for asking about this.

Message was edited by: ccoldren on 1/17/12 2:24:11 PM CST
Reliable Contributor Hayton
Reliable Contributor
Report Inappropriate Content
Message 5 of 7

Re: Critical hole in McAfee products

Jump to solution

Now fixed

-----------------------------------

McAfee Labs Security Advisory

-----------------------------

MTIS12-009 - January 17, 2012

Executive Summary

Since the last McAfee(R) Labs Security Advisory (January 13),

the following noteworthy events have taken place:

McAfee has published KB73910, covering a Remote Code Execution vulnerability in McAfee SaaS Endpoint Protection.

See

https://kc.mcafee.com/corporate/index?page=content&id=KB73910

Solution

McAFee addressed this issue on July 28, 2011. See McAfee Security Bulletin SB10016.

https://kc.mcafee.com/corporate/index?page=content&id=SB10016

Description

This update fixes two bugs in ActiveX controls that the SaaS Endpoint Protection product uses to do its normal operations.

Message was edited by: Hayton on 18/01/12 02:40:34 GMT

Re: Critical hole in McAfee products

Jump to solution

Hi, Cynthia.

Thank you very much for taking the time to respond and answer my question.

Hayton,

Thank you also for the follow up information.

Reliable Contributor Hayton
Reliable Contributor
Report Inappropriate Content
Message 7 of 7

Re: Critical hole in McAfee products

Jump to solution

Well, actually I jumped the gun. There were two issues here, not one, and the fix I pointed to was for the first. The fix for the second was to have been released sometime yesterday. There's a discussion going on about the technical details in another forum, which is how I learned of the second problem. But, anyway, it should all be fixed now.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community