PT-2021-15592

Name of the Vulnerable Software and Affected Versions: McAfee ePolicy Orchestrator ePO versions prior to 5.10 Update 10 Description: The issue allows an unauthenticated user to download McAfee product packages, specifically McAfee Agent, available in the ePO repository and install them on their o...

CVE-2003-0610

The CVE-2003-0610 entry describes a directory traversal vulnerability in the ePO agent of McAfee ePolicy Orchestrator 3.0. Affected component: ePO agent; vulnerability arises from improper handling of HTTP requests, enabling a remote attacker to read arbitrary files on the host. Impact is partial...

CVE-2003-0149

CVE-2003-0149: ePolicy Orchestrator (McAfee) with Agent 2.0/2.5/2.5.1 is affected by a Heap Overflow in the Agent. A remote attacker can trigger arbitrary code execution by sending a POST request with long parameters to the Agent. The issue is documented alongside other ePO vulnerabilities; a ven...

CVE-2003-0610: Undefined Security Weakness

Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request...

CVE-2003-0149: Undefined Security Weakness

Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters...