467 matches found
McAfee ePolicy Orchestrator and ProtectionPilot ActiveX control buffer overflow vulnerability
Overview A vulnerability in an ActiveX control provided with the McAfee ePolicy Orchestrator and ProtectionPilot software could allow a remote attacker to execute arbitrary code on an affected system. Description The McAfee ePolicy Orchestrator and ProtectionPilot are applications that are design...
McAfee ePolicy Orchestrator SiteManager ActiveX buffer overflow
Added: 03/22/2007 CVE: CVE-2007-1498 BID: 22952 OSVDB: 33796 Background ePolicy Orchestrator is a centralized security configuration and monitoring application. It includes the SiteManager ActiveX control which is implemented by sitemanager.dll. Problem A buffer overflow vulnerability in the...
McAfee EPolicy Orchestrator SiteManager.DLL ActiveX控件远程缓冲区溢出漏洞
ePolicy Orchestrator是一款可扩展工具，能够管理由不同供应商的工具所构成的混合防御系统。 ePolicy Orchestrator包含的SiteManager.DLL ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者可以构建恶意WEB页，诱使用户访问来触发，目前没有详细漏洞细节提供。 0 McAfee ProtectionPilot 1.5 McAfee ProtectionPilot 1.1.1 patch 3 McAfee ePolicy Orchestrator 3.6.1 McAfee ePolicy...
CVE-2007-1498
Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...
CVE-2007-1498
McAfee ePolicy Orchestrator (ePO) SiteManager.dll ActiveX control contains multiple stack-based buffer overflows that allow remote code execution when long arguments are passed to ExportSiteList, VerifyPackageCatalog, or related vectors (via swprintf usage). The affected component is SiteManager....
CVE-2007-1498
Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...
ePolicy Orchestrator SiteManager ActiveX Control Multiple Buffer Overflows
The version of the SiteManager ActiveX control included with McAfee ePolicy Orchestrator or ProtectionPilot and installed on the remote host reportedly contains several buffer overflows. If an attacker can trick a user on the affected host into visiting a specially crafted web page, this issue...
[Full-disclosure] [Advisory]McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities
hi full-disclosure, McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities by cocoruder of FSRTFortinet Security Research Team hfliatfortinet.com Summary: Multiple remote buffer overflow vulnerabilities exist in the ActiveX Control named "SiteManager.Dll" of McAfee ePolicy...
McAfee ePolicy Orchestrator ActiveX multiple buffer overflows
Buffer overflows in SiteManager.Dll ExportSiteList and VerifyPackageCatalog functions...
Preemptive Protection against McAfee HTTP Server Buffer Overflow Vulnerability
McAfee ePolicy Orchestrator provides proactive defense against malicious threats and attacks. McAfee ProtectionPilot is a centralized system security manager designed specifically for businesses with up to 500 systems.A vulnerability has been reported in McAfee ePolicy Orchestrator and in McAfee...
McAfee EPolicy Orchestrator和ProtectionPilot HTTP Server远程缓冲区溢出漏洞
McAfee Security ePolicy Orchestrator是一款企业级反病毒管理工具。 ePolicy Orchestrator及ProtectionPilot所带的HTTP Server在处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 ePolicy Orchestrator及ProtectionPilot在处理HTTP请求中的超长Source头选项数据时存在缓冲区溢出，远程攻击者可能通过超长的精心构造的数据溢出缓冲区执行任意指令。 0 McAfee ePolicy Orchestrator = 3.5 patch 5 McAfee...
McAfee ePo 3.5.0 / ProtectionPilot 1.1.0 (Source) Remote Exploit
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
mcafee.pm.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
McAfee HTTP header processing buffer overflow
Added: 10/06/2006 CVE: CVE-2006-5156 BID: 20288 OSVDB: 29421 Background McAfee ePolicy Orchestrator and Protection Pilot are centralized security management products. These products include an HTTP server implemented by the NAISERV.exe program. Problem A buffer overflow vulnerability in the McAfe...
CVE-2006-5156
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header...
CVE-2006-5156
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header...
CVE-2006-5156
Summary: CVE-2006-5156 is a buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126. A remote attacker could exploit a long Source header in requests to the McAfee HTTP server to execute arbitrary code. Affected products/versions (as per provided docs)...
ePolicy Orchestrator HTTP /spipe/pkg/ Source Header Remote Overflow
The remote host is running McAfee ePolicy Orchestrator web service. The remote version of this software contains a stack overflow vulnerability. An unauthenticated attacker can exploit this flaw by sending a specialy crafted packet to the remote host. A successful exploitation of this vulnerabili...
ePolicy Orchestrator Detection
The remote host appears to be running McAfee ePolicy Orchestrator ePO, a security management solution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22493; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22";...