[Full-Disclosure] LHa repercussions: WinZip, WinRar, CommuniGate Pro McAfee plugin, blog

According to various sources on the net, the vulnerable LHa code has been used in other products. SecurityFocus says that WinZip and WinRar also are vulnerable to the LHa buffer overflows: http://www.securityfocus.com/bid/10243/info/ I have found a mailing list discussion about my LHa test archiv...

CVE-2004-0038

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

CVE-2004-0038

CVE-2004-0038 affects McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3. The vulnerability is in the spipe/file handler and enables remote command execution via certain HTTP POST requests to ePO on TCP port 81. The available descriptions identify arbitrary command execution wi...

CVE-2004-0038: Undefined Security Weakness

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC]

McAfee Freescan ActiveX Information Disclosure Additional Details & PoC ------------------------------------------------------------------------- I. ABSTRACT: McAfee Freescan is an online ActiveX based Antivirus utility. II. DESCRIPTION: I've been working on an information disclosure vulnerabilit...

[Full-Disclosure] Mcafee FreeScan - Remote Buffer Overflow and Private Information Disclosure

Application: Mcafee FreeScanactivex Vendors: http://us.mcafee.com/root/mfs/default.asp?cid=9914 Platforms: Windows Bug: Buffer Overflow and Private Information Disclosure Risk: High - Running Arbitary Code Exploitation: Remote with browser Date: 1 Apr 2004 Author: Rafel Ivgi, The-Insider e-mail:...

Mcafee FreeScan CoMcFreeScan Browser - Object Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/10071/info It has been reported that Mcafee FreeScan CoMcFreeScan browser object may be prone to a remote buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient boundary checks performed on data assigned to the object variable...

Mcafee FreeScan CoMcFreeScan Browser - Object Buffer Overflow (PoC)

Mcafee FreeScan CoMcFreeScan Browser - Object Buffer Overflow PoC source: https://www.securityfocus.com/bid/10071/info It has been reported that Mcafee FreeScan CoMcFreeScan browser object may be prone to a remote buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient...

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure source: https://www.securityfocus.com/bid/10077/info Reportedly the Mcafee FreeScan 'McFreeScan.CoMcFreeScan.1' COM object is prone to a remote information disclosure vulnerability. This issue is due to a failure of the object to...

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure

source: https://www.securityfocus.com/bid/10077/info Reportedly the Mcafee FreeScan 'McFreeScan.CoMcFreeScan.1' COM object is prone to a remote information disclosure vulnerability. This issue is due to a failure of the object to properly validate information access credentials. Successful...

McAfee Antivirus Detection and Status

McAfee VirusScan, an antivirus application, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its virus definitions are out of date. C Tenable, Inc. This script has been rewritten by Tenable Original script was written by Je...

Immunity Canvas: NAIMAS32

Name| naimas32 ---|--- CVE| CVE-2004-0095 Exploit Pack| CANVAS Description| Naimas32 Notes| CVE Name: CVE-2004-0095 VENDOR: McAfee CVE Url: https://vulners.com/cve/CVE-2004-0095 CVSS: 5.0...

CVE-2004-0095

McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service memory consumption and crash and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow...

McAfee ePolicy Orchestrator 1.x2.x3.0 Agent - POST Buffer Mismanagement

McAfee ePolicy Orchestrator 1.x2.x3.0 Agent - POST Buffer Mismanagement // source: https://www.securityfocus.com/bid/9476/info The McAfee ePolicy Orchestrator agent has been reported to a buffer management vulnerability that may be exploited to crash the affected agent. Although unconfirmed, it h...

McAfee ePolicy Orchestrator 1.x/2.x/3.0 Agent - POST Buffer Mismanagement

// source: https://www.securityfocus.com/bid/9476/info The McAfee ePolicy Orchestrator agent has been reported to a buffer management vulnerability that may be exploited to crash the affected agent. Although unconfirmed, it has been reported that the issue may also allow a remote attacker to...

CVE-2003-0616

Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution...

CVE-2003-0148

The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that 1 obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, 2 crack t...

CVE-2003-0149

Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters...

CVE-2003-0610

Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request...

CVE-2003-0610

The CVE-2003-0610 entry describes a directory traversal vulnerability in the ePO agent of McAfee ePolicy Orchestrator 3.0. Affected component: ePO agent; vulnerability arises from improper handling of HTTP requests, enabling a remote attacker to read arbitrary files on the host. Impact is partial...