Multiple AntiVirus - .zip Detection Bypass

Multiple AntiVirus - .zip Detection Bypass / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C 2004 oc.192 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation...

McAfee IntruShield Management Console Detection

If an attacker can log into the IntruShield Management Console on the remote host, the attacker will have the ability to modify sensor configuration. C Tenable Network Security, Inc. - modified by Josh Zlatin-Amishav to support newer versions of the product. include"compat.inc"; if description...

CVE-2004-0831

McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges...

CVE-2004-0831

CVE-2004-0831 concerns McAfee VirusScan 4.5.1. The vulnerability arises when using the System Scan options in the System Tray applet, where the process does not drop SYSTEM privileges before enabling users to browse for files, potentially allowing local privilege escalation. The description provi...

CVE-2004-0831

McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges...

CVE-2001-0612

CVE-2001-0612 affects McAfee Remote Desktop 3.0 and earlier. The vulnerability allows a remote attacker to cause a denial of service (crash) by sending a large number of packets to port 5045. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network access, no authentication, and part...

CVE-2004-0095

McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service memory consumption and crash and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow...

CVE-2004-0095

The vulnerability CVE-2004-0095 affects the McAfee ePolicy Orchestrator agent. It stems from improper handling of HTTP POST Content-Length values, potentially allowing a buffer overflow that can lead to memory consumption, denial of service, and possibly arbitrary code execution. Affected compone...

McAfee ePolicy Orchestrator Remote Format String

Binary data 1895.prm...

McAfee WebShield < 4.5 MR2 Bounced Emails Format String

Binary data 3504.prm...

CVE-2004-0038

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

ISS Security Brief: McAfee ePolicy Orchestrator Remote Compromise Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief May 10, 2004 McAfee ePolicy Orchestrator Remote Compromise Vulnerability Synopsis: ISS X-Force has discovered a vulnerability in the McAfee ePolicy Orchestrator software. ePolicy Orchestrator ePO enables the enterprise...

McAfee ePolicy Orchestrator unauthorized access

Invalid HTTP POST request allows to upload files on server...

[Full-Disclosure] LHa repercussions: WinZip, WinRar, CommuniGate Pro McAfee plugin, blog

According to various sources on the net, the vulnerable LHa code has been used in other products. SecurityFocus says that WinZip and WinRar also are vulnerable to the LHa buffer overflows: http://www.securityfocus.com/bid/10243/info/ I have found a mailing list discussion about my LHa test archiv...

CVE-2004-0038

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

CVE-2004-0038

CVE-2004-0038 affects McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3. The vulnerability is in the spipe/file handler and enables remote command execution via certain HTTP POST requests to ePO on TCP port 81. The available descriptions identify arbitrary command execution wi...

McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC]

McAfee Freescan ActiveX Information Disclosure Additional Details & PoC ------------------------------------------------------------------------- I. ABSTRACT: McAfee Freescan is an online ActiveX based Antivirus utility. II. DESCRIPTION: I've been working on an information disclosure vulnerabilit...

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure source: https://www.securityfocus.com/bid/10077/info Reportedly the Mcafee FreeScan 'McFreeScan.CoMcFreeScan.1' COM object is prone to a remote information disclosure vulnerability. This issue is due to a failure of the object to...

[Full-Disclosure] Mcafee FreeScan - Remote Buffer Overflow and Private Information Disclosure

Application: Mcafee FreeScanactivex Vendors: http://us.mcafee.com/root/mfs/default.asp?cid=9914 Platforms: Windows Bug: Buffer Overflow and Private Information Disclosure Risk: High - Running Arbitary Code Exploitation: Remote with browser Date: 1 Apr 2004 Author: Rafel Ivgi, The-Insider e-mail:...

Mcafee FreeScan CoMcFreeScan Browser - Object Buffer Overflow (PoC)

Mcafee FreeScan CoMcFreeScan Browser - Object Buffer Overflow PoC source: https://www.securityfocus.com/bid/10071/info It has been reported that Mcafee FreeScan CoMcFreeScan browser object may be prone to a remote buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient...