CVE-2005-3215

CVE-2005-3215 describes a vulnerability in unspecified versions of McAfee Antivirus where a multiple interpretation error allows remote attackers to bypass virus detection. The issue occurs when processing a malicious executable embedded in a specially crafted RAR file with malformed central and ...

ePolicy Orchestrator Symlink Arbitrary Privileged File Access

The remote host is running ePolicy Orchestrator / ProtectionPilot, a system security management solution from McAfee. According to its banner, the Common Management Agent CMA associated with ePolicy Orchestrator / ProtectionPilot on the remote host can be used by local users to view files residin...

NAePolicy.txt

Summary: Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 http://www.nai.com/ Details: The ePolicy Orchestrator Agent web server which runs on TCP port 8081 by default and serves the McAfee Agent Activity Log can be used to view files that exist on the same...

McAfee WebShield applience backdoor account

There is built-in account with predefined login and password...

[SA16226] McAfee WebShield Default Account Security Issue

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

McAfee Intrushield IPS Abuse Update is available

HI, The IntruShield Manager version 2.1.9.17 contains several updates that correct the vulnerable components that were targeted. IntruShield customers may download the new manager version from: http://www.mcafeesecurity.com/us/downloads/default.asp?wt.mcn=usupdates&wt.mct=extlicon&cid=10373 On 6...

CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the 1 fullAccess or 2 fullAccessRight parameter in reports-column-center.jsp, or 3 fullAccess...

CVE-2005-2188

McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack...

CVE-2005-2186

Multiple cross-site scripting XSS vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to inject arbitrary web script or HTML via the 1 thirdMenuName or 2 resourceName parameter to SystemEvent.jsp...

CVE-2005-2186

Multiple cross-site scripting XSS vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to inject arbitrary web script or HTML via the 1 thirdMenuName or 2 resourceName parameter to SystemEvent.jsp...

CVE-2005-2188

CVE-2005-2188 affects McAfee IntruShield Security Management System. The flaw allows remote attackers to obtain the Manager account by guessing the user ID included in the URL, enabling a brute-force path to privilege escalation. The common description notes possible privilege gain via brute forc...

CVE-2005-2188

McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack...

CVE-2005-2186

CVE-2005-2186 describes multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System. Remote authenticated users can inject arbitrary web script or HTML through either the thirdMenuName or resourceName parameter to SystemEvent.jsp. The NVD record assigns a ...

CVE-2005-2187

CVE-2005-2187 affects McAfee IntruShield Security Management System. The issue allows remote authenticated users to access the Generate Reports feature and modify alerts by setting the Access option to true, demonstrated via (1) fullAccess or (2) fullAccessRight in reports-column-center.jsp, or (...

CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the 1 fullAccess or 2 fullAccessRight parameter in reports-column-center.jsp, or 3 fullAccess...

McAfeeIPS.txt

------=Part1341925560245.1120660746428 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline / = $ An open security advisory 8 - McAfee Intrushield IPS Management Console= =20 Abuse = 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2:...

McAfee Intrushield IPS Abuse

/ $ An open security advisory 8 - McAfee Intrushield IPS Management Console Abuse 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...

McAfee IntruShield Security Management System - Multiple Vulnerabilities

McAfee IntruShield Security Management System - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/14167/info McAfee IntruShield Security Management System is susceptible to multiple vulnerabilities. The first two issues are cross-site scripting vulnerabilities in the...

McAfee IntruShield Security Management System - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/14167/info McAfee IntruShield Security Management System is susceptible to multiple vulnerabilities. The first two issues are cross-site scripting vulnerabilities in the 'intruvert/jsp/systemHealth/SystemEvent.jsp' script. These issues are due to a failur...

CVE-2004-1908

The CVE-2004-1908 issue concerns McAfee FreeScan’s CoMcFreeScan ActiveX object. A design flaw in FreeScan’s scanning component allows remote attackers to obtain sensitive file-system information (via GetSpecialFolderLocation with certain parameters), and a second vulnerability can terminate appli...