cyber_flash has identified a vulnerability in McAfee ePolicy Orchestrator, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a handling error in the Orchestrator Agent when processing certain HTTP traffic. This can be exploited to crash the agent by sending a specially crafted HTTP POST request containing an invalid value in the "Content-Length:" header.

Some reports indicate that this potentially could be exploited to execute code on an affected system due to a buffer overflow, but this is currently unconfirmed.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
cyber_flash

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area