McAfee Virtual Technician McHealthCheck.dll ActiveX Control Save() Method Arbitrary File Overwrite (SB10040)

The remote Windows host has a version of the McAfee Virtual Technician / ePolicy Orchestrator McHealthCheck.dll ActiveX control that allows arbitrary files to be corrupted / overwritten due to a flaw in the Save method. If an attacker can trick a user on the affected host into viewing a specially...

McAfee Virtual Technician ActiveX 控件'Save()'方法文件覆盖漏洞

BUGTRAQ ID: 58750 CVECAN ID: CVE-2012-5879 McAfee Virtual Technician是分析诊断工具。 McAfee Virtual Technician 6.5.0.2101及其他版本的ActiveX控件存在安全漏洞可导致攻击者覆盖或创建受影响应用上下文内的任意文件。该安全漏洞存在于"McHealthCheck.dll"的"Save"方法。 0 McAfee Virtual Technician 6.5.0.2101 厂商补丁： McAfee ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

McAfee Virtual Technician (MVT) 6.5.0.2101 - Insecure ActiveX Method

Advisory ID: HTB23128 Product: McAfee Virtual Technician MVT 6.5.0.2101 Vendor: McAfee Vulnerable Versions: 6.5.0.2101 and probably prior Tested Version: 6.5.0.2101 on Windows 7 SP1 and Internet Explorer 9 Vendor Notification: November 19, 2012 Vendor Patch: March 15, 2013 Public Disclosure: Marc...

McAfee Vulnerability Manager cert_cn Parameter XSS

The version of McAfee Vulnerability Manager installed on the remote host is affected by a cross-site scripting vulnerability in the 'certcn' parameter of the 'index.exp' script. By exploiting this flaw, a remote, unauthenticated attacker could execute arbitrary script code in a user's browser...

McAfee Virtual Technician (MVT) 6.5.0.2101 - Insecure ActiveX Method

McAfee Virtual Technician MVT 6.5.0.2101 - Insecure ActiveX Method Advisory ID: HTB23128 Product: McAfee Virtual Technician MVT 6.5.0.2101 Vendor: McAfee Vulnerable Versions: 6.5.0.2101 and probably prior Tested Version: 6.5.0.2101 on Windows 7 SP1 and Internet Explorer 9 Vendor Notification:...

McAfee Vulnerability Manager Detect

McAfee Vulnerability Manager, a web-based vulnerability manager, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65737; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22"; scriptxrefname:"IAVT"...

CVE-2012-5879

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician MVT and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method...

Design/Logic Flaw

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician MVT and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method...

CVE-2012-5879

Summary: CVE-2012-5879 affects McAfee Virtual Technician (MVT) and ePO-MVT prior to remediation, via the ActiveX control in McHealthCheck.dll. The insecure Save() method on McHealthCheck.dll can cause remote attackers to modify or create arbitrary files using a full pathname argument, potentially...

CVE-2012-5879

An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician MVT and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument to the Save method...

McAfee Virtual Technician (MVT) 6.5.0.2101 Unsafe Active-X

Advisory ID: HTB23128 Product: McAfee Virtual Technician MVT 6.5.0.2101 Vendor: McAfee Vulnerable Versions: 6.5.0.2101 and probably prior Tested Version: 6.5.0.2101 on Windows 7 SP1 and Internet Explorer 9 Vendor Notification: November 19, 2012 Vendor Patch: March 15, 2013 Public Disclosure: Marc...

South Korea Cyber Attack, Wiper malware and Chinese IP Address

Yesterday we reported about a massive Cyber attack on South Korea that was responsible for shutting down networks of South Korean banks and TV broadcasters. Police are still investigating the cyber attack but the country's Communications Commission has revealed that the hacking originated from a...

South Korea Cyber Attack, Wiper malware and Chinese IP Address

Yesterday we reported about a massive Cyber attack on South Korea that was responsible for shutting down networks of South Korean banks and TV broadcasters. Police are still investigating the cyber attack but the country's Communications Commission has revealed that the hacking originated from a...

McAfee VirusScan Enterprise Local Privilege Escalation (SB10034)

The version of McAfee VirusScan Enterprise installed on the remote host is potentially affected by an unspecified local privilege escalation vulnerability. By exploiting this flaw, a local attacker could gain elevated privileges. C Tenable Network Security, Inc. include"compat.inc"; if descriptio...

McAfee VirusScan Enterprise和Host Intrusion Prevention 本地权限提升漏洞

BUGTRAQ ID: 57904 McAfee VirusScan是一款流行的实时病毒保护应用程序。 McAfee VirusScan Enterprise和Host Intrusion Prevention使用的共享组件中存在不明细节错误，可被利用提升权限。 0 McAfee VirusScan Enterprise 8.x McAfee Host Intrusion Prevention 厂商补丁： McAfee ------ McAfee已经为此发布了一个安全公告（SB10034）以及相应补丁: SB10034：McAfee Security Bulletin - VirusSc...

McAfee Email Gateway 7.0 File Disclosure

File disclosure vulnerability in McAfee Email Gateway Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

McAfee Vulnerability Manager - cert_cn Cross-Site Scripting

McAfee Vulnerability Manager - certcn Cross-Site Scripting source: https://www.securityfocus.com/bid/58401/info McAfee Vulnerability Manager is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

McAfee Vulnerability Manager 7.5 Cross Site Scripting

================================================================================================================================================================ McAfee® Vulnerability Manager 7.5 cross-site scripting XSS Vulnerability...

McAfee Vulnerability Manager - 'cert_cn' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58401/info McAfee Vulnerability Manager is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the...

McAfee VirusScan Enterprise Privilege Escalation Vulnerability (Windows)

This host is installed with McAfee VirusScan Enterprise and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbmcafeevseprivescvulnwin.nasl 6104 2017-05-11 09:03:48Z teissa $ McAfee VirusScan Enterprise Privilege Escalation Vulnerability Windows Authors: Arun Kallav...