McAfee Network Security Manager < 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities

Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available: https://www.example.com/intruvert/jsp/module/Login.jsp?password=&Login%2bID=&node=&iaction=precreatefcb14"alert'XSS'8b3283a1e57...

McAfee Network Security Manager 5.1.7 - Multiple Cross-Site Scripting Vulnerabilities

McAfee Network Security Manager 5.1.7 - Multiple Cross-Site Scripting Vulnerabilities...

McAfee Network Security Manager 5.1.7 - Information Disclosure

McAfee Network Security Manager 5.1.7 - Information Disclosure...

McAfee Network Security Manager 5.1.7 - Information Disclosure

source: https://www.securityfocus.com/bid/37004/info McAfee Network Security Manager is prone to an information-disclosure vulnerability because it fails to properly protect sensitive cookie data with the 'HTTPOnly' protection mechanism. A successful exploit may allow attackers to steal...

McAfee Network Security Manager 5.1.7 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37003/info McAfee Network Security Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Mcafee FreeScan Information Disclosure and Application Denial of Service (CVE-2004-1908)

A design flaw within the virus scanning software is the cause of the information disclosure vulnerability. To properly scan remote targets, the installed software must receive file system information from the remote machine. A Malicious usage of the CoMcFreeScan class, can cause paths for various...

McAfee ePO Agent Detection (HTTP)

HTTP based detection of the McAfee ePO Agent. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

McAfee generic PDF detection bypass

No description provided by source. McAfee multiple products - Generic PDF detection bypass Cheap plug : If you are interested in client side vulnerabilities visit HACK.LU starting tomorrow 28-30 Oct with : Workshop: Bypassing the Perimeter: Client Side Exploitation - Nitesh Dhanjani, Billy K Rios...

McAfee Antivirus TAR / PDF Scan Evasion (SB10003)

The McAfee antivirus application installed on the remote host is affected by a scan evasion vulnerability due to the virus definitions being out of date. In this case, the DAT file version of the installed antivirus product is prior to 5693. An attacker can exploit this, by embedding malicious co...

McAfee Remediation Client ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in McAfee Remediation Agent 4.5.0.41. When sending an overly long string to the DeleteSnapshot method of enginecom.dll 3.7.0.9 an attacker may be able to execute arbitrary code. This control is not marked safe for scripting, so choose your attack vecto...

CVE-2009-3339

Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9 through 8.11. NOTE: as of 20090917, this disclosure has no actionable...

Code injection

Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9 through 8.11. NOTE: as of 20090917, this disclosure has no actionable...

CVE-2009-3339

Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9 through 8.11. NOTE: as of 20090917, this disclosure has no actionable...

CVE-2009-3339

CVE-2009-3339 affects McAfee Email and Web Security Appliance 5.1 VMtrial. The vulnerability allows remote attackers to read arbitrary files via unknown vectors (as demonstrated by VulnDisco Pack Pro 8.9–8.11). The NVD entry lists a high risk (CVSSv2 base score 7.8) with confidentiality impact fu...

CVE-2008-7020

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

Design/Logic Flaw

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-7020

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, allowing local users to read sensitive information from memory locations associated with that buffer.

CVE-2008-7020

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

McAfee SmartFilter信息泄漏漏洞

Bugraq ID: 35756 CVE ID：CVE-2009-2312 CVE-2009-2429 CNCVE ID：CNCVE-20092312 CNCVE-20092429 McAfee SmartFilter是一款网站过滤解决方案。 McAfee SmartFilter存在设计问题，本地攻击者可以利用漏洞获得敏感信息。 用于proxy服务器验证的SmartFilter user ID的用户名和明文文本密码保存在c:\Program Files\Secure Computing\Smartfilter...

McAfee Policy Manager 'naPolicyManager.dll'任意文件覆盖漏洞

Bugraq ID: 35404 McAfee ePolicy Orchestrator是一款业界领先的系统安全管理解决方案，能够帮助企业有效抵御各种恶意威胁和攻击。 McAfee Policy Manager 'naPolicyManager.dll'控件存在设计问题，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 问题存在于WriteTaskDataToIniFile方法中，提交恶意文件作为参数，可导致以应用程序权限覆盖系统文件。 0 McAfee Policy Manager 目前没有解决方案提供： a href="http://www.mcafee.com/"...