CVE-2008-1357

CVE-2008-1357 affects McAfee CMA 3.6.0.574 (Patch 3) and earlier, used with ePolicy Orchestrator 4.0.0 build 1015. The vulnerability is in the logDetail function of applib.dll and stems from a format string issue in the UDP AgentWakeup handling (port 8082) that can leak into the format string spe...

CVE-2008-1357

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...

McAfee Framework _naimcomn_Log远程格式串处理漏洞

BUGTRAQ ID: 28228 McAfee Framework是McAfee ePolicy Orchestrator中所实现的用于创建各种McAfee产品服务的框架。 McAfee Framework所安装的applib.dll库中的logDetail函数缺少必要的格式参数便调用了vsnwprintf，远程攻击者可能利用此漏洞控制服务器。 在McAfee ePolicy Orchestrator中可通过发送单个带有畸形sender、package或computer字段的UDP报文来触发这个漏洞。输出日志文件AgentHOSTNAME.log位于Db文件夹中。 0 McAfee...

Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)

Luigi Auriemma Application: McAfee Framework implemented in McAfee ePolicy Orchestrator 4.0 http://www.mcafee.com/us/enterprise/products/systemsecuritymanagement/epolicyorchestrator.html Versions: = 3.6.0.569 Platforms: Windows Bug: format string in naimcomnLog Exploitation: remote Date: 12 Mar...

McAfee Framework / ePolicy Orchestrator format string vulnerability

Format string vulnerability in logging functions...

McAfee Framework ePolicy 3.x - Orchestrator _naimcomn_Log Remote Format String

McAfee Framework ePolicy 3.x - Orchestrator naimcomnLog Remote Format String source: https://www.securityfocus.com/bid/28228/info McAfee Framework is prone to a remote format-string vulnerability. Exploiting this issue will allow attackers to execute arbitrary code with the permissions of the...

McAfee Framework ePolicy 3.x - Orchestrator '_naimcomn_Log' Remote Format String

source: https://www.securityfocus.com/bid/28228/info McAfee Framework is prone to a remote format-string vulnerability. Exploiting this issue will allow attackers to execute arbitrary code with the permissions of the framework or of an application that uses the framework. Failed attacks will like...

VMSA-2008-0004:Updated e2fsprogs service console package

VMSA-2008-0004.1 Updated e2fsprogs service console package VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0004.1 VMware Security AdvisorySynopsis: Updated e2fsprogs service console package VMware Security AdvisoryIssue date: 2008-03-03 VMware Security AdvisoryUpdated on:...

McAfee E-Business Server预认证远程拒绝服务及代码执行漏洞

BUGTRAQ ID: 27197 McAfee e-Business Server用于为存储和共享文档的企业和个人提供透明加密。 McAfee E-Business Server在处理畸形格式的请求数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 如果向McAfee E-Business Server的管理接口（TCP 1718）发送类似于以下的畸形预认证报文的话： "\x01\x3f\x2f\x05\x25\x2a" + "A" 69953 就会导致服务器崩溃，也可能允许执行任意指令。 0 McAfee E-Business Server = 8.5.2 for Windows...

CVE-2008-0127

The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary code via a long initial authentication packet...

Authentication flaw

The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary code via a long initial authentication packet...

McAfee E-Business Server Remote pre-auth Code Execution / DoS PoC

No description provided by source. !/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic [email protected], Infigo IS http://www.infigo.hr/en/ use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718;...

CVE-2008-0127

CVE-2008-0127 affects McAfee E-Business Server (administration interface) versions 8.5.2 and earlier. The vulnerability arises from improper handling of oversized authentication packets, allowing an unauthenticated remote attacker to crash the service (DoS) and potentially execute arbitrary code....

CVE-2008-0127

The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary code via a long initial authentication packet...

McAfee E-Business Server Authentication Packet Remote Overflow

McAfee E-Business Server, an enterprise tool for digitally encrypting and signing electronic files, is installed on the remote host. The version of this software installed on the remote host fails to properly handle over-sized authentication packets sent to its administration interface, generally...

McAfee E-Business Server buffer overflow

TCP/1718 administration interface buffer overflow...

McAfee E-Business Server Remote pre-auth Code Execution / DoS PoC

Exploit for multiple platform in category dos / poc ================================================================= McAfee E-Business Server Remote pre-auth Code Execution / DoS PoC ================================================================= !/usr/bin/perl McAfeeR E-Business ServerTM 8.5....

[INFIGO 2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS

INFIGO IS Security Advisory ADV-2008-01-06 http://www.infigo.hr/en/ Title: McAfee E-Business Server Remote Preauth Code Execution / DoS Advisory ID: INFIGO-2008-01-06 Date: 2008-01-09 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2008-01-06 Impact: Remote code execution Risk...

mcafee2.pl.txt

!/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic , Infigo IS use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718; $exp1 = "\x01\x3f\x2f\x05\x25\x2a" . "A" x 69953;; print " Sending exploit string...\n"; my $serversock =...

McAfee E-Business Server 8.5.2 - Remote Code Execution Denial of Service (PoC)

McAfee E-Business Server 8.5.2 - Remote Code Execution Denial of Service PoC !/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic , Infigo IS use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718; $exp1 = "\x01\x3f\x2f\x05\x25\x2a"...