SecuritySpace - CVE-2015-2859

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-2859

Description: Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Test IDs: 1.3.6.1.4.1.25623.1.0.805595

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-2859
BugTraq ID: 75020
http://www.securityfocus.com/bid/75020
CERT/CC vulnerability note: VU#264092
http://www.kb.cert.org/vuls/id/264092
http://www.securitytracker.com/id/1032571

CVE ID:	CVE-2015-2859
Description:	Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Test IDs:	1.3.6.1.4.1.25623.1.0.805595
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2859 BugTraq ID: 75020 http://www.securityfocus.com/bid/75020 CERT/CC vulnerability note: VU#264092 http://www.kb.cert.org/vuls/id/264092 http://www.securitytracker.com/id/1032571