McAfee ePolicy Orchestrator directory traversal

It's possible to access any files with TCP/8081 interface...

McAfee Common Management Agent Traversal Arbitrary File Write

According to its banner, the McAfee Common Management Agent CMA running on the remote host is affected by a directory traversal vulnerability in the Framework Service component due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a special...

CVE-2006-3575

Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service unstable operation via a long string in the 1 "Process name", 2 "Module name", or 3 "API name" fields...

CVE-2006-3575

CVE-2006-3575 refers to an unknown vulnerability in the Buffer Overflow Protection of McAfee VirusScan Enterprise 8.0.0. The issue allows local users to cause a denial of service (unstable operation) by supplying an excessively long string in any of the fields: Process name, Module name, or API n...

CVE-2006-3575

Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service unstable operation via a long string in the 1 "Process name", 2 "Module name", or 3 "API name" fields...

CVE-2006-3575: Undefined Security Weakness

Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service unstable operation via a long string in the 1 "Process name", 2 "Module name", or 3 "API name" fields...

[Full-disclosure] Microsoft SMB Information Disclosure Vulnerability CVE-2006-1315

McAfee, Inc. McAfee® Avert® Labs Security Advisory Public Release Date: 2006-07-11 SMB Information Disclosure Vulnerability CVE-2006-1315 • Synopsis An information disclosure vulnerability exists in the Server service that could allow an attacker to retrieve fragments of memory from an affected...

[Full-disclosure] Apple QuickDraw/QuickTime Multiple Vulnerabilities

McAfee, Inc. McAfee Averttm Labs Security Advisory Public Release Date: 2006-05-11 Apple QuickDraw/QuickTime Multiple Vulnerabilities CVE-2006-1249, CVE-2006-1453, CVE-2006-1454, CVE-2006-1459, CVE-2006-1460, CVE-2006-1461, CVE-2006-1462, CVE-2006-1464, CVE-2006-1465 Synopsis Apple QuickTime and...

[Full-disclosure] Microsoft MSDTC NdrAllocate Validation Vulnerability

McAfee, Inc. McAfee Averttm Labs Security Advisory Public Release Date: 2006-05-09 Microsoft MSDTC NdrAllocate Validation Vulnerability CVE-2006-0034 Synopsis There is an RPC procedure within the MSDTC interface in msdtcprx.dll that may be called remotely without user credentials in such a way th...

CVE-2006-0559

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed...

Format string

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed...

CVE-2006-0559

McAfee WebShield SMTP format-string vulnerability (CVE-2006-0559) affects McAfee WebShield SMTP prior to MR2. The flaw occurs in the bounce message construction where a format string in the original destination address can be processed unsafe, allowing an unauthenticated attacker to execute arbit...

CVE-2006-0559

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed...

SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability

Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-002 Advisory Name: McAfee WebShield SMTP Format String Vulnerability Release Date : 04-03-2005 Application : McAfee WebShield SMTP 4.5 MR1a Platform : Microsoft Windows Severity : System...

McAfee WebShield antivirus format string vulnerability

Format string vulnerability on SMTP address...

CVE-2006-0559: Undefined Security Weakness

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed...

McAfee VirusScan DUNZIP32.dll Buffer Overflow Vulnerability

Information about new, fixed McAfee VirusScan DUNZIP32.dll Buffer Overflow Vulnerability has been published today at security advisory http://www.networksecurity.fi/advisories/mcafee-virusscan.html Mitre.org assigned the name CVE-2004-1094 to this issue. Best regards, Juha-Matti Laurio,...

Design/Logic Flaw

The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from the web browser, and might not prevent the content from being saved, which allows remote attackers to bypass virus protection, as demonstrated using the EICA...

CVE-2006-0982

The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from the web browser, and might not prevent the content from being saved, which allows remote attackers to bypass virus protection, as demonstrated using the EICA...

CVE-2006-0982

The CVE refers to McAfee Virex 7.7 on Macintosh where the on‑access scanner may fail to activate in some cases when malicious content is accessed from a web browser, potentially allowing the content to be saved and bypassing virus protection. The vulnerability is described as a bypass of protecti...