CVE-2007-1226

McAfee VirusScan for Mac Virex before 7.7 patch 1 has weak permissions 0666 for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files...

McAfee VirusScan for Mac (Virex) <= 7.7 Local Root Exploit

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Following symlinks is bad mmmmmmmmmmkay! $dest = "/var/cron/tabs/root"; $tgts"0" = "Virex 7.7.dmg:"/Library/Application Support/Virex/VShieldExclude.txt" "; unless $target...

McAfee VirusScan for Mac (Virex) 7.7 - Local Privilege Escalation

McAfee VirusScan for Mac Virex 7.7 - Local Privilege Escalation !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Following symlinks is bad mmmmmmmmmmkay! $dest = "/var/cron/tabs/root"; $tgts"0" = "Virex 7.7.dmg:"/Library/Application...

McAfee VirusScan for Mac (Virex) <= 7.7 Local Root Exploit

Exploit for macOS platform in category local exploits ========================================================== McAfee VirusScan for Mac Virex \n\nTargets:\n\n"; foreach $key sortkeys %tgts $a,$b = split/:/,$tgts"$key"; print "\t$key . $a\n"; print "\n"; exit 1; $a,$b = split/:/,$tgts"$target";...

[NETRAGARD-20070220 SECURITY ADVISORY] [McAfee VirusScan for Mac &#40;Virex&#41; Local root exploit and Scan Bypass]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Netragard, L.L.C Advisory Strategic Reconnaissance Team ------------------------------------------------ http://www.netragard.com -- "We make I.T. Safe." POSTING NOTICE - ----------------------------------------------------------------------- If you...

McAfee VirusScan for Mac (Virex) 7.7 - Local Privilege Escalation

!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Following symlinks is bad mmmmmmmmmmkay! $dest = "/var/cron/tabs/root"; $tgts"0" = "Virex 7.7.dmg:"/Library/Application Support/Virex/VShieldExclude.txt" "; unless $target = @ARGV print "\n\nUsage: $0...

McAfee Virex Virus Scan for Mac OS X symbolic links problem and protection bypass

Weak permissions and symbolic links problem on /Library/Application/Sypport/Virex/VShieldExecute.txt file creation...

McAfee Virex fails to properly authenticate the source of updates

Overview McAfee Virex automatic updates may not properly authenticate the source of updates. This may allow a remote attacker to execute arbitrary commands on a vulnerable system. Description McAfee Virex is anti-virus software for the Mac OS X platform. McAfee Virex 7 for Mac OS X connects to a...

McAfee NeoTrace ActiveX控件远程缓冲区溢出漏洞

McAfee NeoTrace是一款跟踪路由数据包的应用程序。 NeoTraceExplorer.NeoTraceLoader ActiveX存在边界条件问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者必须构建恶意WEB页，诱使用户访问来触发，目前没有详细漏洞细节提供。 0 McAfee NeoTrace Professional 3.25 McAfee NeoTrace Express 3.25 目前没有解决方案提供： a href="http://www.networkingfiles.com/PingFinger/Neotraceexpress.htm"...

CVE-2006-6707

Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control NeoTraceExplorer.dll in NeoTrace Express 3.25 and NeoTrace Pro aka McAfee Visual Trace 3.25 allows remote attackers to execute arbitrary code via a long argument string to the TraceTarget method. NOTE: The provenan...

McAfee VirusScan For Linux不安全DT_RPATH变量远程执行代码漏洞

McAfee VirusScan for Linux是Linux平台下的商业杀毒解决方案。 McAfee VirusScan for Linux的搜索路径不可信任，可能会在DTRPATH环境变量中包含当前工作目录，这可能允许本地用户通过在该目录安装恶意的函数库导致加载任意ELF DSO库，执行任意代码。 0 McAfee Virus Scan for Linux 4510e 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： a href="http://www.mcafee.com/"...

CVE-2006-6474

Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DTRPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directo...

CVE-2006-6474

Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DTRPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directo...

CVE-2006-6474

The CVE-2006-6474 entry concerns McAfee VirusScan for Linux 4510e and earlier, where the DT_RPATH environment variable includes the current working directory. This insecure DT_RPATH can allow a local attacker to have the dynamic loader load untrusted ELF DSOs and execute arbitrary code by placing...

McAfee VirusScan: Insecure DT_RPATH

Background McAfee VirusScan for Linux is a commercial antivirus solution for Linux. Description Jakub Moc of Gentoo Linux discovered that McAfee VirusScan was distributed with an insecure DTRPATH which included the current working directory, rather than $ORIGIN which was probably intended. Impact...

GLSA-200612-15 : McAfee VirusScan: Insecure DT_RPATH

The remote host is affected by the vulnerability described in GLSA-200612-15 McAfee VirusScan: Insecure DTRPATH Jakub Moc of Gentoo Linux discovered that McAfee VirusScan was distributed with an insecure DTRPATH which included the current working directory, rather than $ORIGIN which was probably...

[Full-disclosure] Vulnerabilities in Client Service for NetWare

McAfee, Inc. McAfeer Avertr Labs Security Advisory Public Release Date: 2006-11-16 Vulnerabilities in Client Service for NetWare CVE-2006-4688, CVE-2006-4689 Synopsis The Client Service for NetWare CSNW allows a Windows client to access NetWare file, print, and directory services. Successful...

Preemptive Protection against McAfee HTTP Server Buffer Overflow Vulnerability

McAfee ePolicy Orchestrator provides proactive defense against malicious threats and attacks. McAfee ProtectionPilot is a centralized system security manager designed specifically for businesses with up to 500 systems.A vulnerability has been reported in McAfee ePolicy Orchestrator and in McAfee...

Exploits Mcafee Network Agent (mcnasvc.exe) Remote DoS

No description provided by source. ///////////////////////////////////////////////////// // Mcafee Network Agent mcnasvc.exe Remote DoS // By JAAScois http://www.jaascois.com // Teston mcnasvc.exe ver1.0.178.0 // Path C:\Program Files\Common Files\McAfee\MNA // Port: 6646...

McAfee产品查验管理器栈溢出漏洞

McAfee产品查验管理器（McAfee Subscription Manager）是随McAfee很多产品一起发布的用于管理产品许可权限组件，它是一个ActiveX控件，厂商可以通过它检查产品的使用合法性。 McAfee产品查验管理器实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 产品查验管理器的实现模块McSubMgr.dll没有检查传入的参数长度，远程攻击者可以诱使用户访问恶意网站，在网页脚本中向McSubMgr.dll传送超过3000字节长的数据导致发生栈溢出，从而执行任意指令。 0 McAfee VirusScan 9.x McAfee...