Mcafee SecurityCenter远程命令执行漏洞

McAfee SecurityCenter是集中的基于Web的管理控制台，提供了报告和配置控制。 McAfee SecurityCenter及其他用户产品中存在多个漏洞，允许攻击者在有漏洞的系统上执行任意命令，导致完全入侵系统。 漏洞的利用需要用户被诱骗访问恶意网页或在收到邮件时执行某些形式的交互操作。 McAfee SecurityCenter 6.0.22 McAfee SecurityCenter 6.0 McAfee SecurityCenter 4.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

McAfee EPolicy Orchestrator和ProtectionPilot HTTP Server远程缓冲区溢出漏洞

McAfee Security ePolicy Orchestrator是一款企业级反病毒管理工具。 ePolicy Orchestrator及ProtectionPilot所带的HTTP Server在处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 ePolicy Orchestrator及ProtectionPilot在处理HTTP请求中的超长Source头选项数据时存在缓冲区溢出，远程攻击者可能通过超长的精心构造的数据溢出缓冲区执行任意指令。 0 McAfee ePolicy Orchestrator = 3.5 patch 5 McAfee...

InnerMedia DUNZIP32.dll远程栈溢出漏洞

DUNZIP32.dll是一个流行的第三方压缩媒体库。 很多应用程序都用到了DUNZIP32.dll做为压缩库。DUNZIP32.dll在解压有超长用户名的压缩文件时存在栈溢出漏洞，可能允许攻击者在用户系统上执行任意代码。 0 McAfee VirusScan 10.x Real Networks RealPlayer 10.5 Real Networks RealPlayer 10 Real Networks RealOne Player 2.0 IBM Lotus Notes = 5.0.10 IBM Lotus Notes 6.5.4 McAfee SecurityCenter 6...

McAfee ePo 3.5.0 / ProtectionPilot 1.1.0 (Source) Remote Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

CVE-2006-5417

McAfee Network Agent mcnasvc.exe 1.0.178.0, as used by multiple McAfee products possibly including Internet Security Suite, Personal Firewall Plus, and VirusScan, allows remote attackers to cause a denial of service agent crash via a long packet, possibly because of an invalid string position fie...

CVE-2006-5417

McAfee Network Agent mcnasvc.exe 1.0.178.0, as used by multiple McAfee products possibly including Internet Security Suite, Personal Firewall Plus, and VirusScan, allows remote attackers to cause a denial of service agent crash via a long packet, possibly because of an invalid string position fie...

CVE-2006-5417

The CVE-2006-5417 entry concerns McAfee Network Agent (mcnasvc.exe) version 1.0.178.0 used by multiple McAfee products (e.g., Internet Security Suite, Personal Firewall Plus, VirusScan). A vulnerability allows remote attackers to cause a denial of service (agent crash) by sending a long packet, p...

On mcafee the process of learn-vulnerabilities and early warning-the black bar safety net

mcafee in total there are 7 processes 1:frameworkservice.exe: this process can be in the system services found in the Corresponding to the service"mcafee framework" It is used to do what? In fact, it is mcafee's background framework of the process,mcafee product of the shared components of the...

mcnasvc.exe-dos.txt

///////////////////////////////////////////////////// // Mcafee Network Agent mcnasvc.exe Remote DoS // By JAAScois http://www.jaascois.com // Teston mcnasvc.exe ver1.0.178.0 // Path C:\Program Files\Common Files\McAfee\MNA // Port: 6646 ///////////////////////////////////////////////////// inclu...

Mcafee Network Agent buffer overflow

Buffer overflow on oversized string to TCP/6646...

MS06-060 Microsoft Word Memmove Code Execution

McAfee, Inc. McAfee Avert Labs Security Advisory Vendor Notification Date: 2006-07-06 Public Release Date: 2006-10-10 Microsoft Word Memmove Code Execution CVE-2006-3647 • Synopsis An integer bug stack overflow exists in the Microsoft Word file format. The file format allows a attacker to create ...

[Full-disclosure] MS06-060 Microsoft Word Memmove Code Execution

McAfee, Inc. McAfee Avert Labs Security Advisory Vendor Notification Date: 2006-07-06 Public Release Date: 2006-10-10 Microsoft Word Memmove Code Execution CVE-2006-3647 Synopsis An integer bug stack overflow exists in the Microsoft Word file format. The file format allows a attacker to create a...

mcafee.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

McAfee HTTP header processing buffer overflow

Added: 10/06/2006 CVE: CVE-2006-5156 BID: 20288 OSVDB: 29421 Background McAfee ePolicy Orchestrator and Protection Pilot are centralized security management products. These products include an HTTP server implemented by the NAISERV.exe program. Problem A buffer overflow vulnerability in the McAfe...

McAfee HTTP header processing buffer overflow

Added: 10/06/2006 CVE: CVE-2006-5156 BID: 20288 OSVDB: 29421 Background McAfee ePolicy Orchestrator and Protection Pilot are centralized security management products. These products include an HTTP server implemented by the NAISERV.exe program. Problem A buffer overflow vulnerability in the McAfe...

McAfee HTTP header processing buffer overflow

Added: 10/06/2006 CVE: CVE-2006-5156 BID: 20288 OSVDB: 29421 Background McAfee ePolicy Orchestrator and Protection Pilot are centralized security management products. These products include an HTTP server implemented by the NAISERV.exe program. Problem A buffer overflow vulnerability in the McAfe...

McAfee HTTP header processing buffer overflow

Added: 10/06/2006 CVE: CVE-2006-5156 BID: 20288 OSVDB: 29421 Background McAfee ePolicy Orchestrator and Protection Pilot are centralized security management products. These products include an HTTP server implemented by the NAISERV.exe program. Problem A buffer overflow vulnerability in the McAfe...

CVE-2006-5156

Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header...

McAfee HTTP Server vulnerable to buffer overflow

Overview A stack-based buffer overflow exists in the McAfee HTTP server that may allow a remote, unauthenticated attacker to execute arbitrary code. Description The McAfee HTTP server NAISERV.exe is used in McAfee products, such as McAfee ePolicy Orchestrator and Protection Pilot. The McAfee HTTP...

CVE-2006-5156

Summary: CVE-2006-5156 is a buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126. A remote attacker could exploit a long Source header in requests to the McAfee HTTP server to execute arbitrary code. Affected products/versions (as per provided docs)...