4317 matches found
McAfee Common Management Agent < 3.6.0.603 FrameworkService.exe AVClient DoS
According to its banner, the version of the McAfee Common Management Agent CMA running on the remote host is prior to 3.6.0.603. It is, therefore, affected by a denial of service vulnerability in FrameworkService.exe due to a memory corruption issue. An unauthenticated, remote attacker can exploi...
McAfee Network Security Manager Bypass / Hijack
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Security Advisory SWRX-2009-002 McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerability Advisory Information Title: McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerabili...
McAfee Network Security Manager XSS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Security Advisory SWRX-2009-001 McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory Information Title: McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory ID: SWRX-2009-001 Advisory...
Cross site scripting
McAfee IntruShield Network Security Manager NSM before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting XSS vulnerability...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager NSM before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the 1 iaction or 2 node parameter...
CVE-2009-3565
Multiple cross-site scripting XSS vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager NSM before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the 1 iaction or 2 node parameter...
CVE-2009-3566
McAfee IntruShield Network Security Manager NSM before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting XSS vulnerability...
CVE-2009-3566
The CVE-2009-3566 issue affects McAfee IntruShield Network Security Manager (NSM) prior to 5.1.11.8.1, where the session ID cookie is issued without the HttpOnly flag, enabling an XSS-based theft of the session cookie and potential remote session hijacking. Source material indicates the vulnerabi...
CVE-2009-3565
McAfee Network Security Manager (NSM) NSM, affected versions before 5.1.11.6, is reported vulnerable to cross-site scripting (XSS) via user-controllable input in Login.jsp. Specifically, the iaction and node parameters are not properly sanitized, allowing remote attackers to inject arbitrary scri...
CVE-2009-3565
Multiple cross-site scripting XSS vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager NSM before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the 1 iaction or 2 node parameter...
CVE-2009-3566
McAfee IntruShield Network Security Manager NSM before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting XSS vulnerability...
McAfee Network Security Manager Login.jsp页面跨站脚本漏洞
BUGTRAQ ID: 37003 CVE ID: CVE-2009-3565 McAfee Network Security Manager是一款功能强大的入侵防护解决方案。 McAfee Network Security Manager没有正确地验证提交给管理控制台Login.jsp页面的iaction和node参数便在动态生成的Web内容中返回给了用户，远程攻击者可以通过跨站脚本攻击在用户的浏览器会话中注入并执行任意HTML或脚本代码。 0 McAfee Network Security Manager 5.1.7.7 厂商补丁： McAfee ------...
McAfee Network Security Manager会话劫持漏洞
BUGTRAQ ID: 37004 CVE ID: CVE-2009-3566 McAfee Network Security Manager是一款功能强大的入侵防护解决方案。 当用户加载Network Security Manager管理控制台的登录页面时服务端会在执行认证之前在浏览器中设置Cookie。由于没有设置HttpOnly标记，客户端的 JavaScript也可以访问这个Cookie，因此任何可以访问这个Cookie的攻击者都可以通过劫持会话绕过认证，获得对Network Security Manager的管理访问。 0 McAfee Network Security...
McAfee Network Security Manager <5.1.11.8.1 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available:...
[SWRX-2009-002] McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Security Advisory SWRX-2009-002 McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerability Advisory Information Title: McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerabili...
McAfee Network Security Manager 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities
McAfee Network Security Manager 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available:...
McAfee Network Security Manager < 5.1.11.8.1 - Information Disclosure
To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage. The following proof of concept uses a cross-site scripting attack to leverage this issue: https://www.example.com/intruvert/jsp/module/Login.jsp?password=&Login%2bID=&node=&iaction=precreatefcb1...
McAfee Network Security Manager <5.1.11.8.1 Information Disclosure Vulnerability
No description provided by source. To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage. The following proof of concept uses a cross-site scripting attack to leverage this issue:...
McAfee Network Security Manager <= 5.1.11.8.1 Multiple CSS
Exploit for jsp platform in category web applications ========================================================================================= McAfee Network Security Manager alert'XSS'8b3283a1e57...