McAfee Vulnerability Manager cert_cn Parameter XSS

The version of McAfee Vulnerability Manager installed on the remote host is affected by a cross-site scripting vulnerability in the 'certcn' parameter of the 'index.exp' script. By exploiting this flaw, a remote, unauthenticated attacker could execute arbitrary script code in a user's browser...

McAfee Virtual Technician (MVT) 6.5.0.2101 - Insecure ActiveX Method

Advisory ID: HTB23128 Product: McAfee Virtual Technician MVT 6.5.0.2101 Vendor: McAfee Vulnerable Versions: 6.5.0.2101 and probably prior Tested Version: 6.5.0.2101 on Windows 7 SP1 and Internet Explorer 9 Vendor Notification: November 19, 2012 Vendor Patch: March 15, 2013 Public Disclosure: Marc...

McAfee Vulnerability Manager Detect

McAfee Vulnerability Manager, a web-based vulnerability manager, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65737; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22"; scriptxrefname:"IAVT"...

CVE-2012-5879

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician MVT and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method...

Design/Logic Flaw

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician MVT and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method...

CVE-2012-5879

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician MVT and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method...

CVE-2012-5879

Summary: CVE-2012-5879 affects McAfee Virtual Technician (MVT) and ePO-MVT prior to remediation, via the ActiveX control in McHealthCheck.dll. The insecure Save() method on McHealthCheck.dll can cause remote attackers to modify or create arbitrary files using a full pathname argument, potentially...

McAfee Virtual Technician (MVT) 6.5.0.2101 Unsafe Active-X

Advisory ID: HTB23128 Product: McAfee Virtual Technician MVT 6.5.0.2101 Vendor: McAfee Vulnerable Versions: 6.5.0.2101 and probably prior Tested Version: 6.5.0.2101 on Windows 7 SP1 and Internet Explorer 9 Vendor Notification: November 19, 2012 Vendor Patch: March 15, 2013 Public Disclosure: Marc...

South Korea Cyber Attack, Wiper malware and Chinese IP Address

Yesterday we reported about a massive Cyber attack on South Korea that was responsible for shutting down networks of South Korean banks and TV broadcasters. Police are still investigating the cyber attack but the country's Communications Commission has revealed that the hacking originated from a...

South Korea Cyber Attack, Wiper malware and Chinese IP Address

Yesterday we reported about a massive Cyber attack on South Korea that was responsible for shutting down networks of South Korean banks and TV broadcasters. Police are still investigating the cyber attack but the country's Communications Commission has revealed that the hacking originated from a...

McAfee VirusScan Enterprise Local Privilege Escalation (SB10034)

The version of McAfee VirusScan Enterprise installed on the remote host is potentially affected by an unspecified local privilege escalation vulnerability. By exploiting this flaw, a local attacker could gain elevated privileges. C Tenable Network Security, Inc. include"compat.inc"; if descriptio...

McAfee VirusScan Enterprise和Host Intrusion Prevention 本地权限提升漏洞

BUGTRAQ ID: 57904 McAfee VirusScan是一款流行的实时病毒保护应用程序。 McAfee VirusScan Enterprise和Host Intrusion Prevention使用的共享组件中存在不明细节错误，可被利用提升权限。 0 McAfee VirusScan Enterprise 8.x McAfee Host Intrusion Prevention 厂商补丁： McAfee ------ McAfee已经为此发布了一个安全公告（SB10034）以及相应补丁: SB10034：McAfee Security Bulletin - VirusSc...

McAfee Email Gateway 7.0 File Disclosure

File disclosure vulnerability in McAfee Email Gateway Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

McAfee Vulnerability Manager - cert_cn Cross-Site Scripting

McAfee Vulnerability Manager - certcn Cross-Site Scripting source: https://www.securityfocus.com/bid/58401/info McAfee Vulnerability Manager is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

McAfee Vulnerability Manager 7.5 Cross Site Scripting

================================================================================================================================================================ McAfee® Vulnerability Manager 7.5 cross-site scripting XSS Vulnerability...

McAfee Vulnerability Manager - 'cert_cn' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58401/info McAfee Vulnerability Manager is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the...

McAfee VirusScan Enterprise Security Bypass Vulnerability (Windows)

This host is installed with McAfee VirusScan Enterprise and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmcafeevsesecuritybypassvulnwin.nasl 6074 2017-05-05 09:03:14Z teissa $ McAfee VirusScan Enterprise Security Bypass Vulnerability Windows Authors: Arun Kallavi...

McAfee VirusScan Enterprise Privilege Escalation Vulnerability (Windows)

This host is installed with McAfee VirusScan Enterprise and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbmcafeevseprivescvulnwin.nasl 6104 2017-05-11 09:03:48Z teissa $ McAfee VirusScan Enterprise Privilege Escalation Vulnerability Windows Authors: Arun Kallav...

McAfee VirusScan Enterprise Detection (Windows SMB Login)

Detects the installed version of McAfee VirusScan Enterprise. The script detects the version of McAfee VirusScan Enterprise. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

McAfee VirusScan Enterprise Privilege Escalation Vulnerability - Windows

McAfee VirusScan Enterprise is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...