McAfee due to patch spam relay problem in cloud product

The flaw in McAfee's SaaS for Total Protection can be used by attackers to send spam from victims' computers

McAfee expects to patch by Thursday two problems with its SaaS Total Protection antimalware service, one of which lets an attacker use a computer as a spam relay.

SaaS Total Protection is a hosted security service from Intel-owned McAfee. Clients sign up for the service, which provides features such as a firewall, antivirus scans and antispam services that run in McAfee's data centers.

One of the issues allows spammers to "bounce off" affected machines and allow the relaying of spam, Dave Marcus, director of security research for McAfee, wrote on Wednesday.

The problem came to light when some users reported their service providers had blocked their IP address after noticing an uptick in unsolicited email streaming from their computers.

The vulnerability can be exploited by misusing McAfee's "Rumor," a peer-to-peer file sharing technology the company developed to distribute security updates within an internal network. The spam-related problem does not, however, allow an attacker to gain access to data on the computer, Marcus wrote.

The other issue involves abuse of an ActiveX control, which is a small add-on program that works in a Web browser to facilitate the downloading of programs or security updates.

Marcus did not elaborate further on the problem but wrote that it "has much in common with a similar issue patched in August 2011. In fact, the patch delivered then basically cuts off the exploitation path for this issue, effectively reducing the risk to zero. Because of this, customer data is not directly at risk."

Patches should be ready following testing by Thursday, Marcus wrote. McAfee customers using SaaS Total Protection will automatically receive the updates.

Send news tips and comments to jeremy_kirk@idg.com

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?