McAfee Patches ActiveX Flaw In ePO Software


CRN logo By Kevin McLaughlin, ChannelWeb

3:18 PM EDT Wed. Mar. 14, 2007
McAfee has issued a patch for multiple security vulnerabilities in an ActiveX control that ships with its ePolicy Orchestrator and ProtectionPilot software.

In an advisory released Tuesday, McAfee said a successful attack would require reverse engineering of ePO, as well as the creation of a malicious Web page and cooperation from an ePO user. If successful, the attacker would be able to trigger a buffer overflow and corrupt process memory, paving the way for remote code execution with the privileges of the user.

EPolicy Orchestrator security management software provides a central console for managing McAfee enterprise security software. ProtectionPilot software automates updating for McAfee antivirus and antispyware software on networked PCs.

Vulnerable products include McAfee ePolicy Orchestrator 3.5 patch 6, 3.5.0, 3.6.0 and 3.6.1, as well as McAfee ProtectionPilot 1.1.1 patch 3 and 1.5.0. McAfee pushed the update to its Service Portal servers and made it available for download on Feb. 21.

McAfee rated the severity of the flaw as "medium," but security firm Secunia gave the vulnerability its second-higherst rating of "highly critical." Symantec Deepsight rated the flaw's severity at 8.3 on a 10-point scale.

 
Channelweb : Promofinder
FEATURED PROMOTIONS
30% off Virtualization Manager 2010 Corporate
Save 30% on Paragon Software Virtualization Manager 2010 Corporate. Our response to the typical problems of every modern comp...
Endian UTM Empowering VARS
Endian empowers VARs with Partners Rock! Channel Program.
RELATED BLOG >>
Photo
Delfigo's flagship DS Gateway touts a zero-footprint installation with its cloud architecture, eliminating the need for flash downloads and hardware tokens.
Media Kits | Reprints | Privacy Statement | Copyright © 2010 United Business Media LLC | Terms of Service
CRN Logo ChannelWeb Logo CRN Logo CRNTech Logo Everything Channel Events IPED
ADVERTISEMENT




CHANNEL SERVICES >>