Re: Multiple vulnerabilities in McAfee ePO 4.6.6

McAfee has released a Knowledgebase Article KB to address the issues reported by a NATO pen test. https://kc.mcafee.com/corporate/index?page=content&id=KB78824 Both SQL Injection vulnerabilities were identified on May 10th, 2013 and patched as specified in SB10043. McAfee's internal testing leads...

Multiple vulnerabilities in McAfee ePO 4.6.6

Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 4.6.6 Affected Product: McAfee ePO 4.6.6 Build 176 & potentially earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendor informed 12 June 2013 - Vendor...

McAfee ePO 4.6.6 - Multiple Vulnerabilities

McAfee ePO 4.6.6 - Multiple Vulnerabilities Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 4.6.6 Affected Product: McAfee ePO 4.6.6 Build 176 & potentially earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendo...

McAfee ePO 4.6.6 - Multiple Vulnerabilities

Exploit for windows platform in category web applications Vulnerability Details: 1. SQL injection a. GET /core/showRegisteredTypeDetails.do?registeredTypeID=epo.rt.computer&uid=6waitf or%20delay'0%3a0%3a20'-- &index=0&datasourceID=&orion.user.security.token=2LoWTAOfWJ4ZCjxY&ajax Mode=standard...

McAfee ePO 4.6.6 - Multiple Vulnerabilities

Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 4.6.6 Affected Product: McAfee ePO 4.6.6 Build 176 & potentially earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendor informed 12 June 2013 - Vendor...

McAfee ePO 4.6.6 Cross Site Scripting / SQL Injection

Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 4.6.6 Affected Product: McAfee ePO 4.6.6 Build 176 & potentially earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendor informed 12 June 2013 - Vendor...

McAfee ePO Extension for McAfee Agent Multiple Blind SQL Injection (SB10043)

According to its self-reported version number, the version of ePO Extension for McAfee Agent installed on the remote host has multiple blind SQL injection vulnerabilities. A remote, authenticated user could exploit this to execute arbitrary SQL queries, resulting in arbitrary code execution with...

Trellix ePolicy Orchestrator Application Server Detection

ePolicy Orchestrator ePO Application Server, a web interface for ePO, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66318; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/14";...

CVE-2013-0141

Summary (CVE-2013-0141): A directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) allows a remote attacker to upload arbitrary files via a crafted request over the Agent-Server communication channel, demonstrated by writing to the Software/ directory. It affects ePO versions prior...

CVE-2013-0140

CVE-2013-0140 describes a SQL injection vulnerability in the Agent-Handler component of McAfee ePolicy Orchestrator (ePO) , affecting versions before 4.5.7 and 4.6.x before 4.6.6. A remote attacker can execute arbitrary SQL commands by sending a crafted request over the Agent-Server communication...

CVE-2012-5879

Summary: CVE-2012-5879 affects McAfee Virtual Technician (MVT) and ePO-MVT prior to remediation, via the ActiveX control in McHealthCheck.dll. The insecure Save() method on McHealthCheck.dll can cause remote attackers to modify or create arbitrary files using a full pathname argument, potentially...

CVE-2012-5879

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician MVT and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method...

Design/Logic Flaw

McAfee ePolicy Orchestrator ePO 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL...

CVE-2012-4594

CVE-2012-4594 affects McAfee ePolicy Orchestrator (ePO) version 4.6.1 and earlier. The issue allows remote authenticated users to bypass access restrictions and read sensitive information from arbitrary reporting panels by modifying an ID value in a console URL. The provided documents do not spec...

Windows Gather McAfee ePO 4.6 Config SQL Credentials

This module extracts connection details and decrypts the saved password for the SQL database in use by a McAfee ePO 4.6 server. The passwords are stored in a config file. They are encrypted with AES-128-ECB and a static key. This module requires Metasploit: https://metasploit.com/download Current...

McAfee ePO Version Detection

Binary data 4799.prm...

Mcafee EPO 4.0 FrameworkService.exe Remote Denial of Service Exploit

No description provided by source. !/usr/bin/python Mcafee EPO 4.0 and others FrameworkService.exe DOS More than meets the eye Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/mcafeeagain.py.txt EAX 00840C30 ECX 00837830 EDX 01EACF18...

mcafeeepo-dos.txt

!/usr/bin/python Mcafee EPO 4.0 and others FrameworkService.exe DOS More than meets the eye Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/mcafeeagain.py.txt EAX 00840C30 ECX 00837830 EDX 01EACF18 EBX 00004000 ESP 01EAFF04 EBP 01EAFF38...

Mcafee EPO 4.0 - FrameworkService.exe Remote Denial of Service

Mcafee EPO 4.0 - FrameworkService.exe Remote Denial of Service !/usr/bin/python Mcafee EPO 4.0 and others FrameworkService.exe DOS More than meets the eye Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/mcafeeagain.py.txt EAX 00840C30 E...

Mcafee EPO 4.0 FrameworkService.exe Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ==================================================================== Mcafee EPO 4.0 FrameworkService.exe Remote Denial of Service Exploit ==================================================================== !/usr/bin/python Mcafee EPO 4.0 and...