CVE-2007-1538

McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...

CVE-2007-1538

The CVE-2007-1538 entry concerns McAfee VirusScan Enterprise 8.5.0.i, where insecure permissions on Windows Registry keys (HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection and HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion) allow local users to bypass l...

CVE-2007-1538

McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...

McAfee EPolicy Orchestrator SiteManager.DLL ActiveX控件远程缓冲区溢出漏洞

ePolicy Orchestrator是一款可扩展工具，能够管理由不同供应商的工具所构成的混合防御系统。 ePolicy Orchestrator包含的SiteManager.DLL ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者可以构建恶意WEB页，诱使用户访问来触发，目前没有详细漏洞细节提供。 0 McAfee ProtectionPilot 1.5 McAfee ProtectionPilot 1.1.1 patch 3 McAfee ePolicy Orchestrator 3.6.1 McAfee ePolicy...

[CAID 34817, 35058, 35158, 35159]: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities

Title: CAID 34817, 35058, 35158, 35159: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities CA Vuln ID CAID: 34817, 35058, 35158, 35159 CA Advisory Date: 2007-03-15 Reported By: McAfee Impact: Remote attackers can cause a denial of service or potentially execute arbitrary cod...

Stack overflow

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...

CVE-2007-1498

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...

CVE-2007-1498

McAfee ePolicy Orchestrator (ePO) SiteManager.dll ActiveX control contains multiple stack-based buffer overflows that allow remote code execution when long arguments are passed to ExportSiteList, VerifyPackageCatalog, or related vectors (via swprintf usage). The affected component is SiteManager....

CVE-2007-1498

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...

ePolicy Orchestrator SiteManager ActiveX Control Multiple Buffer Overflows

The version of the SiteManager ActiveX control included with McAfee ePolicy Orchestrator or ProtectionPilot and installed on the remote host reportedly contains several buffer overflows. If an attacker can trick a user on the affected host into visiting a specially crafted web page, this issue...

[Full-disclosure] [Advisory]McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities

hi full-disclosure, McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities by cocoruder of FSRTFortinet Security Research Team hfliatfortinet.com Summary: Multiple remote buffer overflow vulnerabilities exist in the ActiveX Control named "SiteManager.Dll" of McAfee ePolicy...

McAfee ePolicy Orchestrator ActiveX multiple buffer overflows

Buffer overflows in SiteManager.Dll ExportSiteList and VerifyPackageCatalog functions...

Netragard Security Advisory 2007-02-20

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Netragard, L.L.C Advisory Strategic Reconnaissance Team ------------------------------------------------ http://www.netragard.com -- "We make I.T. Safe." POSTING NOTICE - ----------------------------------------------------------------------- If you...

Command injection

VShieldCheck in McAfee VirusScan for Mac Virex before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands...

Code injection

McAfee VirusScan for Mac Virex before 7.7 patch 1 has weak permissions 0666 for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files...

CVE-2007-1227

VShieldCheck in McAfee VirusScan for Mac Virex before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands...

CVE-2007-1226

McAfee VirusScan for Mac Virex before 7.7 patch 1 has weak permissions 0666 for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files...

CVE-2007-1227

CVE-2007-1227 affects McAfee VirusScan for Mac (Virex) prior to 7.7 patch 1. The issue is a local privilege escalation via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, allowing a local user to change permissions of arbitrary files by symlinking to a sensitive target ...

CVE-2007-1226

CVE-2007-1226 affects McAfee VirusScan for Mac (Virex) prior to 7.7 patch 1, where /Library/Application Support/Virex/VShieldExclude.txt has weak permissions (0666). Local users could modify the exclude list and cause Virex to skip scanning of arbitrary files, impacting confidentiality/integrity/...

CVE-2007-1227

VShieldCheck in McAfee VirusScan for Mac Virex before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands...