Worm Hole in McAfee Anti-virus Products *UPdate*

**radio667** · 08-02-2006, 06:19 PM

from eweek.com ........ eEye Warns of Worm Hole in McAfee Anti-virus Products

A code execution vulnerability in software products sold by Internet security vendor McAfee could put millions at risk of computer takeover attacks, according to a warning from eEye Digital Security.

The flaw affects fully patched versions of all McAfee consumer security products, including the company's flagship McAfee Internet Security Suite 2006.

eEye Chief Hacking Officer Marc Maiffret, in Aliso Viejo, Calif., said his company is withholding technical details on the vulnerability until McAfee completes work on a patch.

Maiffret said the issue was discovered and reported to McAfee on July 19.

"This vulnerability can be used to compromise systems running these McAfee consumer products and allow attackers to run code with the ability to modify/delete files [or] backdoor systems," Maiffret said in an e-mail exchange with eWEEK.

In keeping with its disclosure policy, eEye has posted a deliberately vague advisory on the bug.

Maiffret said his company's researchers were able to successfully compromise the following products: McAfee Internet Security Suite 2006, McAfee Wireless Home Network Security, McAfee Personal Firewall Plus, McAfee VirusScan, McAfee Privacy Service, McAfee SpamKiller and McAfee AntiSpyware.

cUnNiNg_StUnTs · 08-02-2006, 08:36 PM

Thanks Radio.

Lunarbunny · 08-02-2006, 08:38 PM

AVG Free FTW

cUnNiNg_StUnTs · 08-02-2006, 08:42 PM

It doesn't look like the desktop AV products are effected mostly enterprise applications like ePolicy Orchestrator and stuff.

Quote:

McAfee ePolicy Orchestrator 3.x
McAfee Common Management Agent 3.x
McAfee ProtectionPilot 1.x
Microsoft Windows

SkaarjMaster · 08-02-2006, 09:56 PM

It says McAfee VirusScan in that list in the thread starter.

I ditched McAfee for Kaspersky anyway and I'll never look back. For a free one though, AntiVir is better!
http://forums.pcper.com/showthread.php?t=418613

Lunarbunny · 08-02-2006, 11:54 PM

Quote:

Originally Posted by SkaarjMaster

It says McAfee VirusScan in that list in the thread starter.

I ditched McAfee for Kaspersky anyway and I'll never look back. For a free one though, AntiVir is better!
http://forums.pcper.com/showthread.php?t=418613

I used AntiVir for a while but I don't think it scans inside of archives very well.

**radio667** · 08-03-2006, 03:55 AM

from the register ....... Who guards the guards?

McAfee has fixed a flaw involving older versions of its consumer security software that creates a means for hackers to compromise vulnerable systems.

The bug is the latest in a string of flaws affecting security software packages that have come to light over recent months.

In this case, the unspecified security bug relates to McAfee SecurityCenter, creating a means to execute hostile code providing users can be tricked into visiting a malicious website.

The vulnerability affects versions 4.3 through 6.0.22 of SecurityCenter, a component of a wide range of McAfee security products including: McAfee Internet Security Suite 2006, McAfee Wireless Home Network Security, McAfee Personal Firewall Plus, McAfee VirusScan, McAfee Privacy Service, McAfee SpamKiller and McAfee AntiSpyware.

Users are advised to update to McAfee SecurityCenter, as explained in an advisory by McAfee here Most, but not all, McAfee users will automatically receive the update.

The bug was discovered by security researchers at eEye Digital Security, which has published an advisory .

Manticore · 08-03-2006, 03:58 AM

Quote:

Originally Posted by Lunarbunny

AVG Free FTW

+1,000,000

cUnNiNg_StUnTs · 08-03-2006, 10:56 AM

*updates list*

Affected Software:
McAfee® SecurityCenter 4.3 through McAfee SecurityCenter 6.0.22 which may contain a combination of the following products:
McAfee AntiSpyware 1.x, 2.x
McAfee Internet Security Suite 6.x, 7.x, 8.x
McAfee Personal Firewall Plus 5.x, 6.x, 7.x
McAfee Privacy Service 6.x, 7.x, 8.x
McAfee QuickClean 4.x, 5.x, 6.x
McAfee SpamKiller 5.x, 6.x, 7.x
McAfee VirusScan 8.x, 9.x, 10.x
McAfee Wireless Home Network Security 1.x

08-02-2006, 06:19 PM	#1
radio667 I R Happy Goat Join Date: May 2002 Posts: 10,755 Downloads: 2	Worm Hole in McAfee Anti-virus Products UPdate from eweek.com ........ eEye Warns of Worm Hole in McAfee Anti-virus Products A code execution vulnerability in software products sold by Internet security vendor McAfee could put millions at risk of computer takeover attacks, according to a warning from eEye Digital Security. The flaw affects fully patched versions of all McAfee consumer security products, including the company's flagship McAfee Internet Security Suite 2006. eEye Chief Hacking Officer Marc Maiffret, in Aliso Viejo, Calif., said his company is withholding technical details on the vulnerability until McAfee completes work on a patch. Maiffret said the issue was discovered and reported to McAfee on July 19. "This vulnerability can be used to compromise systems running these McAfee consumer products and allow attackers to run code with the ability to modify/delete files [or] backdoor systems," Maiffret said in an e-mail exchange with eWEEK. In keeping with its disclosure policy, eEye has posted a deliberately vague advisory on the bug. Maiffret said his company's researchers were able to successfully compromise the following products: McAfee Internet Security Suite 2006, McAfee Wireless Home Network Security, McAfee Personal Firewall Plus, McAfee VirusScan, McAfee Privacy Service, McAfee SpamKiller and McAfee AntiSpyware. Attached Thumbnails __________________ , "There is also a river called Helikon [in Pieria]. (...) But, they go on to say, the women who killed Orpheus wished to wash off in it the blood-stains, and thereat the River sank underground, so as not to lend its waters to cleanse manslaughter." —Pausanias, Description of Greece 9. 30. 8

08-02-2006, 08:38 PM	#3
Lunarbunny BOOOMER! Join Date: Jun 2004 Location: Seattle, WA Posts: 1,674 Downloads: 2	AVG Free FTW __________________ Since I tend to pop up then disappear again, contact me at: Google (Preferably Google Talk or Gmail) Steam Community

08-02-2006, 09:56 PM	#5
SkaarjMaster same as he ever was Join Date: Jul 2002 Location: Tampa, FL Posts: 1,293 Downloads: 906	It says McAfee VirusScan in that list in the thread starter. I ditched McAfee for Kaspersky anyway and I'll never look back. For a free one though, AntiVir is better! http://forums.pcper.com/showthread.php?t=418613 __________________ http://web.archive.org/web/200812180...ondunreal.com/ "If I give up my rights, I might be safe, but what good is being safe if you have no freedoms?" by n3m35i5 "I always turn to the sports page first....They record people's accomplishments; the front page, nothing but man's failure." by Earl Warren

08-03-2006, 03:55 AM	#7
radio667 I R Happy Goat Join Date: May 2002 Posts: 10,755 Downloads: 2	McAfee security bug bites deep from the register ....... Who guards the guards? McAfee has fixed a flaw involving older versions of its consumer security software that creates a means for hackers to compromise vulnerable systems. The bug is the latest in a string of flaws affecting security software packages that have come to light over recent months. In this case, the unspecified security bug relates to McAfee SecurityCenter, creating a means to execute hostile code providing users can be tricked into visiting a malicious website. The vulnerability affects versions 4.3 through 6.0.22 of SecurityCenter, a component of a wide range of McAfee security products including: McAfee Internet Security Suite 2006, McAfee Wireless Home Network Security, McAfee Personal Firewall Plus, McAfee VirusScan, McAfee Privacy Service, McAfee SpamKiller and McAfee AntiSpyware. Users are advised to update to McAfee SecurityCenter, as explained in an advisory by McAfee here Most, but not all, McAfee users will automatically receive the update. The bug was discovered by security researchers at eEye Digital Security, which has published an advisory . __________________ , "There is also a river called Helikon [in Pieria]. (...) But, they go on to say, the women who killed Orpheus wished to wash off in it the blood-stains, and thereat the River sank underground, so as not to lend its waters to cleanse manslaughter." —Pausanias, Description of Greece 9. 30. 8

Thread Tools
Show Printable Version Email this Page
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

08-02-2006, 08:36 PM	#2
cUnNiNg_StUnTs Stunning don't you think? Join Date: Oct 2002 Location: San Antonio, TX, USA Posts: 3,235 Downloads: 36 My Files: 2	Thanks Radio.

08-03-2006, 10:56 AM	#9
cUnNiNg_StUnTs Stunning don't you think? Join Date: Oct 2002 Location: San Antonio, TX, USA Posts: 3,235 Downloads: 36 My Files: 2	updates list Affected Software: McAfee® SecurityCenter 4.3 through McAfee SecurityCenter 6.0.22 which may contain a combination of the following products: McAfee AntiSpyware 1.x, 2.x McAfee Internet Security Suite 6.x, 7.x, 8.x McAfee Personal Firewall Plus 5.x, 6.x, 7.x McAfee Privacy Service 6.x, 7.x, 8.x McAfee QuickClean 4.x, 5.x, 6.x McAfee SpamKiller 5.x, 6.x, 7.x McAfee VirusScan 8.x, 9.x, 10.x McAfee Wireless Home Network Security 1.x