CVE-2004-2635

An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue method...

CVE-2004-0932

The CVE-2004-0932 issue affects McAfee Anti-Virus Engine DATS drivers before 4398 (and the DATS Driver before 4397). A crafted ZIP archive with both local and global headers set to zero can bypass antivirus protection and still be opened on the target system. This is a remote-exploitation-style b...

CVE-2004-0932

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from bei...

Multiple AntiVirus - .zip Detection Bypass

Multiple AntiVirus - .zip Detection Bypass / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C 2004 oc.192 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation...

McAfee IntruShield Management Console Detection

If an attacker can log into the IntruShield Management Console on the remote host, the attacker will have the ability to modify sensor configuration. C Tenable Network Security, Inc. - modified by Josh Zlatin-Amishav to support newer versions of the product. include"compat.inc"; if description...

CVE-2004-0831

McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges...

CVE-2004-0831

CVE-2004-0831 concerns McAfee VirusScan 4.5.1. The vulnerability arises when using the System Scan options in the System Tray applet, where the process does not drop SYSTEM privileges before enabling users to browse for files, potentially allowing local privilege escalation. The description provi...

CVE-2004-0831

McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges...

CVE-2004-0095

The vulnerability CVE-2004-0095 affects the McAfee ePolicy Orchestrator agent. It stems from improper handling of HTTP POST Content-Length values, potentially allowing a buffer overflow that can lead to memory consumption, denial of service, and possibly arbitrary code execution. Affected compone...

CVE-2004-0095

McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service memory consumption and crash and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow...

CVE-2001-0612

CVE-2001-0612 affects McAfee Remote Desktop 3.0 and earlier. The vulnerability allows a remote attacker to cause a denial of service (crash) by sending a large number of packets to port 5045. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network access, no authentication, and part...

McAfee ePolicy Orchestrator Remote Format String

Binary data 1895.prm...

McAfee WebShield < 4.5 MR2 Bounced Emails Format String

Binary data 3504.prm...

CVE-2004-0038

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

McAfee ePolicy Orchestrator unauthorized access

Invalid HTTP POST request allows to upload files on server...

ISS Security Brief: McAfee ePolicy Orchestrator Remote Compromise Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief May 10, 2004 McAfee ePolicy Orchestrator Remote Compromise Vulnerability Synopsis: ISS X-Force has discovered a vulnerability in the McAfee ePolicy Orchestrator software. ePolicy Orchestrator ePO enables the enterprise...

[Full-Disclosure] LHa repercussions: WinZip, WinRar, CommuniGate Pro McAfee plugin, blog

According to various sources on the net, the vulnerable LHa code has been used in other products. SecurityFocus says that WinZip and WinRar also are vulnerable to the LHa buffer overflows: http://www.securityfocus.com/bid/10243/info/ I have found a mailing list discussion about my LHa test archiv...

CVE-2004-0038

CVE-2004-0038 affects McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3. The vulnerability is in the spipe/file handler and enables remote command execution via certain HTTP POST requests to ePO on TCP port 81. The available descriptions identify arbitrary command execution wi...

CVE-2004-0038

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC]

McAfee Freescan ActiveX Information Disclosure Additional Details & PoC ------------------------------------------------------------------------- I. ABSTRACT: McAfee Freescan is an online ActiveX based Antivirus utility. II. DESCRIPTION: I've been working on an information disclosure vulnerabilit...