CVE-2013-0141

Summary (CVE-2013-0141): A directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) allows a remote attacker to upload arbitrary files via a crafted request over the Agent-Server communication channel, demonstrated by writing to the Software/ directory. It affects ePO versions prior...

PT-2013-2127

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions prior to 4.5.7 McAfee ePolicy Orchestrator ePO versions 4.6.x prior to 4.6.6 Description A directory traversal issue allows remote attackers to upload arbitrary files via a crafted request over the...

PT-2013-2126

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions prior to 4.5.7 McAfee ePolicy Orchestrator ePO versions 4.6.x prior to 4.6.6 Description A SQL injection issue exists in the Agent-Handler component, allowing remote attackers to execute arbitrary SQL...

CVE-2013-0141: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory...

CVE-2013-0140: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator ePO before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel...