McAfee Email and Web Security Appliance Unspecified Information Disclosure Vulnerability

Bugtraq ID:	36272
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 03 2009 12:00AM
Updated:	Sep 04 2009 12:02AM
Credit:	Intevydis
Vulnerable:	McAfee Email and Web Security Appliance 5.1
Not Vulnerable:

McAfee Email and Web Security Appliance Unspecified Information Disclosure Vulnerability

McAfee Email and Web Security Appliance is prone to an unspecified information-disclosure vulnerability.

Attackers can exploit this issue to harvest sensitive information that may lead to further attacks.

Email and Web Security Appliance 5.1 is vulnerable.

McAfee Email and Web Security Appliance Unspecified Information Disclosure Vulnerability

A working commercial exploit is available through Intevydis. This exploit is not otherwise publicly available or known to be circulating in the wild.

McAfee Email and Web Security Appliance Unspecified Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

McAfee Email and Web Security Appliance Unspecified Information Disclosure Vulnerability

References:

• Email and Web Security Appliance Homepage (McAfee)
  
• VulnDisco Pack Professional (Intevydis)