Re: Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3)

[NoBrain NoPain <nobnop () gmail com>]

Hello,

Reed Arvin wrote:
> Patches/Workarounds:
> The vendor was notified of the issue. There was no response.

Vendor Response:
http://knowledgemap.nai.com/KanisaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=KBkb42216xml&language=en_US

One can find there: "McAfee was not notified in advance of this
vulnerability per "standard industry practices". It would be
interesting when you contacted McAfee and what you told them...;)

-- nobnop
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/