McAfee VirusScan Enterprise Detection (HTTP, Linux)

Detection of McAfee VirusScan Enterprise for Linux. The script sends a HTTP connection request to the server and attempts to detect the presence of McAfee VirusScan Enterprise for Linux and to extract its version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted...

McAfee VirusScan Enterprise for Windows scriptproxy COM object memory corruption vulnerability

Overview McAfee VirusScan Enterprise for Windows scriptproxy COM object contains a memory corruption vulnerability. Description According to the reporter, McAfee VirusScan Enterprise for Windows version 8.7i through at least 8.8 patch 7 contains a scriptproxy COM object that is vulnerable to the...

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

''' Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Remote Unauthenticated File Read with Constraints CVE-2016-8018: No Cross-Site Request Forgery Tokens CVE-2016-8019: Cross Site Scripting CVE-2016-8020:...

McAfee Releases Security Bulletin for Virus Scan Enterprise

McAfee has released a security bulletin to address multiple vulnerabilities in Virus Scan Enterprise software versions 2.0.3 and earlier. Some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review McAfee...

McAfee VirusScan for Linux contains multiple vulnerabilities

Overview McAfee VirusScan for Linux contains multiple vulnerabilities. Description McAfee VirusScan for Linux version 2.0.3 and prior is vulnerable to the following:CWE-200: Information Exposure - CVE-2016-8016 Multiple pages within the web interface utilize a tplt parameter. An authenticated...

McAfee Application Control and Endpoint Security Security Bypass Vulnerability

McAfee Application Control MAC and Endpoint Security are both products of the U.S. company McAfee McAfee. The former is a set of program control software, the latter is a set of endpoint security software to provide intelligent threat defense. MAC and Endpoint Security have a local security bypas...

McAfee Host Intrusion Prevention Installed

Binary data mcafeehipsinstalled.nbin...

McAfee Host Intrusion Prevention Services < 8.0.0.3828 Authentication Bypass (SB10173)

The version of McAfee Host Intrusion Prevention Services HIPS is prior to 8.0.0.3828. It is, therefore, affected by an authentication bypass vulnerability due to improper registry key permissions. A local attacker can exploit this, under certain conditions, to manipulate the product's registry...

mcafee.force.com XSS vulnerability

Vulnerable URL: http://mcafee.force.com/chat/apex/ISEndCustomerPreChatForm?isOffline=true=EC=NA=www.mcafee.com/us/enterprise/reference-architecture/index.aspx=%3C/script%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E%3Cscript%3E Details: Description| Value ---|--- Patched:| No Latest check f...

McAfee Host Intrusion Prevention Services Local Authentication Bypass Vulnerability

McAfee Host Intrusion Prevention Services IPS is a suite of anti-virus software from the American company McAfee McAfee. A local authentication bypass vulnerability exists in McAfee Host Intrusion Prevention Services versions prior to 8.0. A local attacker can exploit this vulnerability to bypass...

Cumulative update for Windows 10 Version 1607 and Windows Server 2016: October 11, 2016

None None...

McAfee Security Information and Event Management 9.5.x / 9.6.x < 9.6.0.3 ESM Authentication Bypass (KB87744)

According to its self-reported version, the McAfee Security Information and Event Management SIEM application installed on the remote host is 9.5.x or 9.6.x prior to 9.6.0.3. It is, therefore, affected by an authentication bypass vulnerability in the Enterprise Security Manager ESM component due ...

PT-2016-36: Privilege Escalation in McAfee Application Control

The specialists of the Positive Research center have detected a Privilege Escalation vulnerability in McAfee Application Control. Vulnerability in McAfee Application Control allows attackers elevate privileges, cause a denial of service, or potentially execute arbitrary code via unauthorized use ...

McAfee ePolicy Orchestrator Arbitrary Code Execution Vulnerability (Sep 2016)

McAfee ePolicy Orchestrator is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

What is Defcon

The first year I attended, I was lucky enough to identify interesting wireless signals with a distinct sound - that of the POCSAG and FLEX protocols. Decoding these signals revealed party invites to the Telephreak party where I listened to raw, uncensored lightning talks covering topics from car...

McAfee Email Gateway Multiple Vulnerabilities

McAfee Email Gateway is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mcafee:emailgateway"; ...

550g.mcafee.com XSS vulnerability

Vulnerable URL: https://550g.mcafee.com/McfIAM/mfeAuthznFailed.jsp?AppId=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.06.2017 Latest check for patch:| 28.06.2017 12:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

McAfee Email Gateway - Application Protections Bypass

MEG is vulnerable to file attachments containing the null character. The scanning mechanism fails to identify the file name properly. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

McAfee Email Gateway Detection

Binary data mcafeeemailgatewayversionremote.nbin...

McAfee Email Gateway File Attachment Name NULL Character Handling Filter Bypass (SB10161)

The McAfee Email Gateway MEG application running on the remote host is affected by a flaw when processing email file attachments due to a failure to remove NULL characters from the raw header value before it is decoded. An unauthenticated, remote attacker can exploit this, via a crafted file...