McAfee Subscription Manager ActiveX control vulnerable to stack buffer overflow

Overview The McAfee Subscription Manager ActiveX control contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code. Description ActiveXActiveX is a technology that allows programmers to create reusable software components that can be incorporated int...

McAfee Subscription Manager ActiveX buffer overflow

Buffer overflow in McSubMgr.dll marked safe for scripting...

[EEYEB-20060719] McAfee Subscription Manager Stack Buffer Overflow

McAfee Subscription Manager Stack Buffer Overflow Release Date: August 7, 2006 Date Reported: July 19, 2006 Patch Development Time In Days: 17 Days Severity: High Remote Code Execution Vendor: McAfee Systems Affected: McAfee AntiSpyware 1.x, 2.x McAfee Internet Security Suite 6.x, 7.x, 8.x McAfee...

GLSA-200608-01 : Apache: Off-by-one flaw in mod_rewrite

The remote host is affected by the vulnerability described in GLSA-200608-01 Apache: Off-by-one flaw in modrewrite An off-by-one flaw has been found in Apache's modrewrite module by Mark Dowd of McAfee Avert Labs. This flaw is exploitable depending on the types of rewrite rules being used. Impact...

CVE-2006-3961

The CVE-2006-3961 vulnerability is a stack buffer overflow in the McAfee Subscription Manager ActiveX control (mcsubmgr.dll) used by McAfee Security Center and related products. A long/ crafted input passed to versus printf-family code (vsprintf) can overflow the stack, potentially allowing remot...

Apache: Off-by-one flaw in mod_rewrite

Background The Apache HTTP server is one of the most popular web servers on the Internet. The Apache module modrewrite provides a rule-based engine to rewrite requested URLs on the fly. Description An off-by-one flaw has been found in Apache's modrewrite module by Mark Dowd of McAfee Avert Labs...

apache -- mod_rewrite buffer overflow vulnerability

The Apache Software Foundation and The Apache HTTP Server Project reports: An off-by-one flaw exists in the Rewrite module, modrewrite, as shipped with Apache 1.3 since 1.3.28, 2.0 since 2.0.46, and 2.2 since 2.2.0. Depending on the manner in which Apache HTTP Server was compiled, this software...

CVE-2006-3623

Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. dot dot in the directory and filename in a PropsResponse PackageType request...

CVE-2006-3623

Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. dot dot in the directory and filename in a PropsResponse PackageType request...

CVE-2006-3623

CVE-2006-3623 affects the McAfee ePolicy Orchestrator agent (Framework Service) prior to 3.5.0.x, where a directory traversal via a .. sequence in a PropsResponse (PackageType) request allows remote, unauthenticated attackers to create arbitrary files. The issue is a path traversal vulnerability ...

[SA21037] McAfee ePolicy Orchestrator Directory Traversal Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

EEYE: McAfee ePolicy Orchestrator Remote Compromise

McAfee ePolicy Orchestrator Remote Compromise Release Date: July 13, 2006 Severity: High Remote Code Execution Vendor: McAfee Systems Affected: McAfee Common Management EPO Agent versions below version 3.5.5.438 Overview: McAfee ePolicy Orchestrator is the remote security management software for...

McAfee ePolicy Orchestrator directory traversal

It's possible to access any files with TCP/8081 interface...

McAfee Common Management Agent Traversal Arbitrary File Write

According to its banner, the McAfee Common Management Agent CMA running on the remote host is affected by a directory traversal vulnerability in the Framework Service component due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a special...

CVE-2006-3575

Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service unstable operation via a long string in the 1 "Process name", 2 "Module name", or 3 "API name" fields...

CVE-2006-3575

Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service unstable operation via a long string in the 1 "Process name", 2 "Module name", or 3 "API name" fields...

CVE-2006-3575

CVE-2006-3575 refers to an unknown vulnerability in the Buffer Overflow Protection of McAfee VirusScan Enterprise 8.0.0. The issue allows local users to cause a denial of service (unstable operation) by supplying an excessively long string in any of the fields: Process name, Module name, or API n...

[Full-disclosure] Microsoft SMB Information Disclosure Vulnerability CVE-2006-1315

McAfee, Inc. McAfee® Avert® Labs Security Advisory Public Release Date: 2006-07-11 SMB Information Disclosure Vulnerability CVE-2006-1315 • Synopsis An information disclosure vulnerability exists in the Server service that could allow an attacker to retrieve fragments of memory from an affected...

[Full-disclosure] Apple QuickDraw/QuickTime Multiple Vulnerabilities

McAfee, Inc. McAfee Averttm Labs Security Advisory Public Release Date: 2006-05-11 Apple QuickDraw/QuickTime Multiple Vulnerabilities CVE-2006-1249, CVE-2006-1453, CVE-2006-1454, CVE-2006-1459, CVE-2006-1460, CVE-2006-1461, CVE-2006-1462, CVE-2006-1464, CVE-2006-1465 Synopsis Apple QuickTime and...

[Full-disclosure] Microsoft MSDTC NdrAllocate Validation Vulnerability

McAfee, Inc. McAfee Averttm Labs Security Advisory Public Release Date: 2006-05-09 Microsoft MSDTC NdrAllocate Validation Vulnerability CVE-2006-0034 Synopsis There is an RPC procedure within the MSDTC interface in msdtcprx.dll that may be called remotely without user credentials in such a way th...