6 matches found
CVE-2006-3623
Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. dot dot in the directory and filename in a PropsResponse PackageType request...
CVE-2006-3623: Undefined Security Weakness
Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. dot dot in the directory and filename in a PropsResponse PackageType request...
CVE-2005-2554
The CVE-2005-2554 issue affects Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3). The web server stores in insecure permissions for the Common Framework\Db folder, allowing local users to read arbitrary files by creating a subfolder in the EPO agent web root. This is an information‑l...
CVE-2005-2554
The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory...
CVE-2005-2554: Undefined Security Weakness
The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory...
CVE-2004-0095: Undefined Security Weakness
McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service memory consumption and crash and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow...