4793 matches found
McAfee Network Security Manager < 5.1.11.8.1 - Information Disclosure Vulnerability
No description provided by source. To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage. The following proof of concept uses a cross-site scripting attack to leverage this issue:...
McAfee Virtual Technician 6.3.0.1911 MVT.MVTControl.6300 ActiveX GetObject() Exploit
No description provided by source...
McAfee ePolicy Orchestrator 4.6.0-4.6.5 (ePowner) - Multiple Vulnerabilities
No description provided by source. Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 ePowner - Multiple vulnerabilities Date: 20 November 2012 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage: http://www.mcafee.com/uk/products/epolicy-orchestrator.aspx Version...
McAfee Network Security Manager < 5.1.11.8.1 - Multiple Cross Site Scripting Vulnerabilities
No description provided by source...
McAfee Framework ePolicy 3.x - Orchestrator '_naimcomn_Log' Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28228/info McAfee Framework is prone to a remote format-string vulnerability. Exploiting this issue will allow attackers to execute arbitrary code with the permissions of the framework or of an application that uses the...
McAfee 4.0,Network Associates for Windows NT 4.0.2/4.0.3 a,Norton AntiVirus 2000 Recycle Bin Exclusion
No description provided by source. McAfee VirusScan 4.0,Network Associates VirusScan for Windows NT 4.0.2/4.0.3 a,Symantec Norton AntiVirus 2000 Recycle Bin Exclusion Vulnerability source: http://www.securityfocus.com/bid/956/info Many commercial virus scanners for Windows platforms exclude the...
McAfee ePolicy Orchestrator Remote Code Execution (CVE-2013-0140; CVE-2013-0141)
A remote code execution vulnerability has been reported in McAfee ePolicy Orchestrator ePO. The vulnerability is due to an error in the ePO server that fails to properly sanitize user supplied data. A remote attacker can exploit this weakness to execute arbitrary code via a specially crafted http...
KLA10262 PE vulnerability in McAfee
An unspecified vulnerability was found in McAfee products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally. Original advisories McAfee bulletin Related products McAfee-Host-Intrusion-Prevention McAfee-VirusScan CVE list Solution...
McAfee ePolicy Orchestrator Multiple OpenSSL Vulnerabilities (SB10075)
The remote host is running a version of McAfee ePolicy Orchestrator that is affected by multiple vulnerabilities due to flaws in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service attacks. Not...
McAfee Web Gateway Multiple OpenSSL Vulnerabilities (SB10075)
The remote host is running a version of McAfee Web Gateway MWG that is affected by multiple vulnerabilities due to flaws in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service attacks. Note thi...
McAfee Web Gateway < 7.3.2.2 DoS (SB10052)
The remote host has a version of McAfee Web Gateway MWG prior to 7.3.2.2. It is, therefore, affected by a denial of service vulnerability due to a flaw in the packaged ISC BIND server. An attacker can exploit this vulnerability by sending a specially crafted query with a malformed RDATA section. ...
McAfee Web Gateway < 7.1.0.5 / 7.1.5.2 XSS
The remote host has a version of McAfee Web Gateway MWG prior to 7.1.0.5 / 7.1.5.2. It is, therefore, reportedly affected by an unspecified cross-site scripting vulnerability in the web UI. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...
McAfee Firewall Enterprise DoS (SB10052)
The remote host has a version of McAfee Firewall Enterprise installed that is affected by a denial of service vulnerability due to a flaw in the packaged ISC BIND server. An attacker can exploit this by sending a specially crafted query with a malformed RDATA section. C Tenable Network Security,...
McAfee VirusScan Enterprise for Linux Detection and Status
McAfee VirusScan Enterprise for Linux VSEL is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc';...
McAfee Security Scanner Plus privilege escalation
Privilege escalation via executable spoofing...
Buggy insecure "security" software executes rogue binary during installation and uninstallation
Hi @ll, the $&§ware by the name of "McAfee Security Scanner Plus" that Adobe dares to push to unsuspecting users of Microsoft Windows trying to get flash player from their main distribution page hxxp://get.adobe.com/flashplayer/ was developed, packaged and tested by people who obviously never hea...
McAfee VirusScan Enterprise for Linux User Interface Detection
Binary data mcafeevseldetecthttp.nbin...
McAfee VirusScan Enterprise for Linux Detection
Binary data mcafeevseldetect.nbin...
McAfee VirusScan Enterprise for Linux OpenSSL Information Disclosure (SB10071) (Heartbleed)
The remote host has a version of McAfee VirusScan Enterprise for Linux VSEL that is affected by an information disclosure due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory fr...
McAfee Firewall Enterprise OpenSSL Information Disclosure (SB10071) (Heartbleed)
The remote host has a version of McAfee Firewall Enterprise installed that is affected by an out-of-bounds read error, known as Heartbleed, in the TLS/DTLS implementation due to improper handling of TLS heartbeat extension packets. A remote attacker, using crafted packets, can trigger a buffer...