EUVD-2001-1125

Malware in sbrugna...

McAfee ASaP VirusScan service does not adequately validate input

Overview A vulnerability exists in McAfee ASaP VirusScan that permits intruders to access files outside of the web root. Description Quoting from the McAfee ASaP VirusScan FAQ, McAfee ASaP VirusScan is "a web-based, managed and updated anti-virus service for the entire desktop environment." McAfe...

mcaffee.mycio.traversal.txt

----- Begin Hush Signed Message from [email protected] ----- -= SECURITY ADVISORY =- McAfee ASaP Virusscan - myCIO HTTP Server Directory Traversal Vulnerabilty Date: 28 June 2001 Impact: HIGH Affected: Any machine running the McAfee Agent ASaP VirusScan Software Tested on: NT Workstation 4.0,...

CVE-2001-1144

Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP request...