KLA10260 ACE vulnerability in McAfeeE-Buisness Server

An unspecified vulnerability was found in McAfee E-Business. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed auth packet. Original advisories - Exploitation Public exploits exist for this...

McAfee E-Business Server 8.5.2 - Remote Code Execution / Denial of Service (PoC)

!/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic , Infigo IS use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718; $exp1 = "\x01\x3f\x2f\x05\x25\x2a" . "A" x 69953;; print " Sending exploit string...\n"; my $serversock =...

e2fsprogs security update

CentOS Errata and Security Advisory CESA-2008:0003 Updated e2fsprogs packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The e2fsprogs packages contain a numb...

Moderate: Red Hat Security Advisory: e2fsprogs security update

Updated e2fsprogs packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The e2fsprogs packages contain a number of utilities for creating, checking, modifying,...

McAfee VirusScan Enterprise本地溢出漏洞

McAfee VirusScan是一款流行的实时病毒保护应用程序。 McAfee VirusScan Enterprise中存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞在运行了VirusScan机器上执行任意指令。 在“缓冲区溢出保护属性”中，本地攻击者可以设置缓冲区溢出例外，然后用以下数据填充每个字段并点击“确定”： 进程名称：AAAAAAAAAAAAAAAAA......etc 模块名称：AAAAAAAAAAAAAAAAAA......etc API名称：AAAAAAAAAAAAAAAAAAAAA......etc 这样就会导致AV拒绝服务。 0 McAfee VirusScan...

FreeBSD : e2fsprogs -- heap buffer overflow (299e3f81-aee7-11dc-b781-0016179b2dd5)

Theodore Y. Ts'o reports : Fix a potential security vulnerability where an untrusted filesystem can be corrupted in such a way that a program using libext2fs will allocate a buffer which is far too small. This can lead to either a crash or potentially a heap-based buffer overflow crash. No known...

E2fsprogs: Multiple buffer overflows

Background E2fsprogs provides utilities for use with the ext2 and ext3 file systems including the libext2fs library that allows user-level programs to manipulate an ext2 or ext3 file system. Description Rafal Wojtczuk McAfee AVERT Research discovered multiple integer overflows in libext2fs, that...

e2fsprogs -- heap buffer overflow

Theodore Y. Ts'o reports: Fix a potential security vulnerability where an untrusted filesystem can be corrupted in such a way that a program using libext2fs will allocate a buffer which is far too small. This can lead to either a crash or potentially a heap-based buffer overflow crash. No known...

DSA-1422-1 e2fsprogs - arbitrary code execution

Bulletin has no description...

McAfee E-Business Server验证报文处理整数溢出漏洞

McAfee e-Business Server是一款用于为存储和共享文档的企业和个人提供透明加密。 McAfee e-Business Server解析验证报文存在整数溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 提供包含超长长度值的验证报文，可导致触发整数溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 0 McAfee E-Business Server 8.5.2 McAfee E-Business Server 8.1.1 厂商解决方案 升级到最新程序： a...

McAfee E-Business Server认证报文处理整数溢出漏洞

BUGTRAQ ID: 26269 CVECAN ID: CVE-2007-2957 McAfee e-Business Server用于为存储和共享文档的企业和个人提供透明加密。 McAfee E-Business Server的管理工具服务在解析认证报文时存在整数溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果远程攻击者向服务器发送的认证报文包含有超长长度值的话，就可以触发这个溢出，最终导致堆溢出，允许在服务器上执行任意指令。 0 McAfee E-Business Server 8.1.1 for Linux 厂商补丁： McAfee ------...

CVE-2007-2957

Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers to execute arbitrary code via a large length value in an authentication packet, which results in a heap-based buffer overflow...

Integer overflow

Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers to execute arbitrary code via a large length value in an authentication packet, which results in a heap-based buffer overflow...

CVE-2007-2957

CVE-2007-2957 affects McAfee E-Business Server: integer overflow in authentication packet handling leads to a heap-based buffer overflow. Impact: remote code execution. Affected: Solaris < 8.5.3; Linux/HP-UX/AIX

CVE-2007-2957

Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers to execute arbitrary code via a large length value in an authentication packet, which results in a heap-based buffer overflow...

Secunia Research: McAfee E-Business Server Auth Packet Handling Buffer Overflow

====================================================================== Secunia Research 31/10/2007 - McAfee E-Business Server Auth Packet Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

McAfee E-Business server buffer overflow

Buffer overflow on authentication request processing...

CVE-2002-2282

McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs...

CVE-2002-2282

McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for specific DLLs in the user’s home directory even while browsing the local hard drive, enabling local users to run arbitrary code through malicious DLLs. This is described as a local-privilege impact with potential comple...

McAfee VirusScan 10.0.21 ActiveX control Stack Overflow PoC

Exploit for unknown platform in category dos / poc =========================================================== McAfee VirusScan 10.0.21 ActiveX control Stack Overflow PoC =========================================================== Proof of Concept - Mc Afee Viruscan Stack Overflow v10.0.21 Proof ...