Operating System:

[Appliance]

Published:

07 December 2017

Protect yourself against future threats.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
                         AUSCERT Security Bulletin

                               ASB-2017.0208
              McAfee Security Bulletin - Email Gateway update
                              7 December 2017

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:              McAfee Email Gateway
Operating System:     Network Appliance
Impact/Access:        Access Privileged Data         -- Remote/Unauthenticated
                      Denial of Service              -- Remote/Unauthenticated
                      Provide Misleading Information -- Remote/Unauthenticated
Resolution:           Patch/Upgrade
CVE Names:            CVE-2016-6308 CVE-2016-6307 CVE-2016-6306
                      CVE-2016-6305 CVE-2016-6304 CVE-2016-6303
                      CVE-2016-6302 CVE-2016-2183 CVE-2016-2182
                      CVE-2016-2181 CVE-2016-2180 CVE-2016-2179
                      CVE-2016-2178 CVE-2016-2177 CVE-2016-1286
                      CVE-2016-1285 CVE-2015-8704 
Member content until: Saturday, January  6 2018
Reference:            ASB-2016.0017
                      ESB-2016.1473
                      ESB-2016.1068
                      ESB-2016.1042

OVERVIEW

        A vulnerability has been identified in McAfee Email Gateway prior to 
        versions 7.6.404h1128596-3334.102 [1,2]


IMPACT

        The vendor has provided the following details regarding the 
        vulnerabilities:
        
        "Impact of Vulnerability: Denial of Service (CWE-730, OWASP 2004:A9)
        
        Description
        These vulnerabilities allow remote authenticated users to cause a 
        denial of service via a malformed APL or DNAME record.
        
        CVE-2016-1286
        CVE-2016-1285
        CVE-2015-8704" [1]
        
        "Impact of Vulnerability:  Information Leak / Disclosure (CWE-717, 
        OWASP 2004:A6)Denial of Service (CWE-730, OWASP 2004:A9)
        
        Disclaimer
        Description
        These vulnerabilities allows remote authenticated users to cause a 
        denial of service via a number of different attacks, obtain clear text 
        data via a "Sweet32" attack, or obtain a DSA private key via a timing 
        side channel attack.
        
        CVE-2016-6308
        CVE-2016-6307
        CVE-2016-6306
        CVE-2016-6305
        CVE-2016-6304
        CVE-2016-6303
        CVE-2016-6302
        CVE-2016-2183
        CVE-2016-2182
        CVE-2016-2181
        CVE-2016-2180
        CVE-2016-2179
        CVE-2016-2178
        CVE-2016-2177" [2]


MITIGATION

        McAfee recommends users  Install or update to McAfee Email Gateway (MEG) 
        7.6.404h1128596-3334.102 [1,2]


REFERENCES

        [1] McAfee Security Bulletin - Email Gateway update fixes denial of
            service vulnerabilities (CVE-2016-1286, CVE-2016-1285, and
            CVE-2015-8704)
            https://kc.mcafee.com/corporate/index?page=content&id=SB10214

        [2] McAfee Security Bulletin - Email Gateway update fixes several
            OpenSSL vulnerabilities
            https://kc.mcafee.com/corporate/index?page=content&id=SB10215

AusCERT has made every effort to ensure that the information contained
in this document is accurate.  However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours 
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=u9X6
-----END PGP SIGNATURE-----