4294 matches found
McAfee VirusScan 8.0 Path Specification Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16040/info McAfee VirusScan is prone to a vulnerability that could allow an arbitrary file to be executed. The 'naPrdMgr.exe' process calls applications without using properly quoted paths. Successful exploitation may all...
McAfee Visual Trace ActiveX Control Buffer Overflow
No description provided by source. $Id: mcafeevisualtracetracetarget.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
McAfee Asset Manager 6.6 - Multiple Vulnerabilities
No description provided by source. Cloud SSO is vuln to unauthed XSS in the authentication audit form: https://twitter.com/BrandonPrry/status/445969380656943104 McAfee Asset Manager v6.6 multiple vulnerabilities http://www.mcafee.com/us/products/asset-manager.aspx Authenticated arbitrary file rea...
McAfee Remediation Client ActiveX Control Buffer Overflow
No description provided by source. $Id: mcafeeherculesdeletesnapshot.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
McAfee IntruShield Security Management System Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14167/info McAfee IntruShield Security Management System is susceptible to multiple vulnerabilities. The first two issues are cross-site scripting vulnerabilities in the 'intruvert/jsp/systemHealth/SystemEvent.jsp' script...
McAfee Virtual Technician 6.3.0.1911 MVT.MVTControl.6300 ActiveX GetObject() Exploit
No description provided by source...
McAfee Virtual Technician (MVT) 6.5.0.2101 - Insecure ActiveX Method
No description provided by source...
McAfee Virtual Technician MVTControl 6.3.0.1911 GetObject Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
McAfee ePO 4.6.6 - Multiple Vulnerabilities
No description provided by source. Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in McAfee ePO 4.6.6 Affected Product: McAfee ePO 4.6.6 Build 176 & potentially earlier versions Timeline: 08 June 2013 - Vulnerability found 12 June 2013 - Vendor informe...
MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (5)
No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...
McAfee Network Security Manager < 5.1.11.8.1 - Information Disclosure Vulnerability
No description provided by source. To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage. The following proof of concept uses a cross-site scripting attack to leverage this issue:...
McAfee ePolicy Orchestrator Remote Code Execution (CVE-2013-0140; CVE-2013-0141)
A remote code execution vulnerability has been reported in McAfee ePolicy Orchestrator ePO. The vulnerability is due to an error in the ePO server that fails to properly sanitize user supplied data. A remote attacker can exploit this weakness to execute arbitrary code via a specially crafted http...
KLA10262 PE vulnerability in McAfee
An unspecified vulnerability was found in McAfee products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally. Original advisories McAfee bulletin Related products McAfee-Host-Intrusion-Prevention McAfee-VirusScan CVE list Solution...
McAfee ePolicy Orchestrator Multiple OpenSSL Vulnerabilities (SB10075)
The remote host is running a version of McAfee ePolicy Orchestrator that is affected by multiple vulnerabilities due to flaws in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service attacks. Not...
McAfee Web Gateway Multiple OpenSSL Vulnerabilities (SB10075)
The remote host is running a version of McAfee Web Gateway MWG that is affected by multiple vulnerabilities due to flaws in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service attacks. Note thi...
McAfee Web Gateway < 7.3.2.2 DoS (SB10052)
The remote host has a version of McAfee Web Gateway MWG prior to 7.3.2.2. It is, therefore, affected by a denial of service vulnerability due to a flaw in the packaged ISC BIND server. An attacker can exploit this vulnerability by sending a specially crafted query with a malformed RDATA section. ...
McAfee Firewall Enterprise DoS (SB10052)
The remote host has a version of McAfee Firewall Enterprise installed that is affected by a denial of service vulnerability due to a flaw in the packaged ISC BIND server. An attacker can exploit this by sending a specially crafted query with a malformed RDATA section. C Tenable Network Security,...
McAfee Web Gateway < 7.1.0.5 / 7.1.5.2 XSS
The remote host has a version of McAfee Web Gateway MWG prior to 7.1.0.5 / 7.1.5.2. It is, therefore, reportedly affected by an unspecified cross-site scripting vulnerability in the web UI. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...
McAfee VirusScan Enterprise for Linux Detection and Status
McAfee VirusScan Enterprise for Linux VSEL is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc';...
