McAfee responds to Fortinet's claims

McAfee has posted a security bulletin in response to Fortinet's claims that their global threat research team had discovered multiple vulnerabilities in McAfee ePolicy Orchestrator and ProtectionPilot.

"The security flaws in McAfee ePolicy Orchestrator and McAfee ProtectionPilot SiteManager.dll are only found on machines that have the management console installed on it and are only exploitable with the assistance of the end user," says McAfee spokesperson David Coffey

"Very few machines in an organisation should have this console installed on it, and it is not installed with any of McAfee's other products or the ePolicy Orchestrator and ProtectionPilot agent," he says.

McAfee published the vulnerability announcement to its online knowledgebase and contacted customers through various means to alert them of security patches posted which fix these non-critical security flaws.

The two patches are available for download:
McAfee ePolicy Orchestrator (ePO) 3.6.1 Patch 1 or higher fixes multiple vulnerabilities
McAfee ePolicy Orchestrator (ePO) and ProtectionPilot (PRP) HotFixes fix multiple vulnerabilities

ITWeb Security Summit 2007

Taking place from 22 - 25 May 2007 at Vodaworld, ITWeb's Second Annual Security Summit will bring together almost 30 international and local IT and security professionals, practitioners, industry experts and analysts. They will share their experiences, acquire knowledge and gain an understanding of the key tools, techniques and strategies needed to safeguard their organisations' most valuable asset - information. International security guru and author, Bruce Schneier, and creator of the Pretty Good Privacy (PGP) e-mail encryption protocol, Phil Zimmermann, will deliver the opening keynote addresses. More information about the event and delegate bookings is available online at www.securitysummit.co.za or by contacting Denise Breytenbach at (011) 807-3294 or denise@itweb.co.za.

Related stories:
Fortinet discovers McAfee Vulnerabilities