4294 matches found
Mcafee FreeScan CoMcFreeScan Browser - Object Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/10071/info It has been reported that Mcafee FreeScan CoMcFreeScan browser object may be prone to a remote buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient boundary checks performed on data assigned to the object variable...
Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure
source: https://www.securityfocus.com/bid/10077/info Reportedly the Mcafee FreeScan 'McFreeScan.CoMcFreeScan.1' COM object is prone to a remote information disclosure vulnerability. This issue is due to a failure of the object to properly validate information access credentials. Successful...
McAfee Antivirus Detection and Status
McAfee VirusScan, an antivirus application, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its virus definitions are out of date. C Tenable, Inc. This script has been rewritten by Tenable Original script was written by Je...
CVE-2004-0095
McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service memory consumption and crash and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow...
Immunity Canvas: NAIMAS32
Name| naimas32 ---|--- CVE| CVE-2004-0095 Exploit Pack| CANVAS Description| Naimas32 Notes| CVE Name: CVE-2004-0095 VENDOR: McAfee CVE Url: https://vulners.com/cve/CVE-2004-0095 CVSS: 5.0...
McAfee ePolicy Orchestrator 1.x2.x3.0 Agent - POST Buffer Mismanagement
McAfee ePolicy Orchestrator 1.x2.x3.0 Agent - POST Buffer Mismanagement // source: https://www.securityfocus.com/bid/9476/info The McAfee ePolicy Orchestrator agent has been reported to a buffer management vulnerability that may be exploited to crash the affected agent. Although unconfirmed, it h...
McAfee ePolicy Orchestrator 1.x/2.x/3.0 Agent - POST Buffer Mismanagement
// source: https://www.securityfocus.com/bid/9476/info The McAfee ePolicy Orchestrator agent has been reported to a buffer management vulnerability that may be exploited to crash the affected agent. Although unconfirmed, it has been reported that the issue may also allow a remote attacker to...
CVE-2003-0148
The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that 1 obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, 2 crack t...
CVE-2003-0149
Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters...
CVE-2003-0616
Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution...
CVE-2003-0610
Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request...
CVE-2003-0616
CVE-2003-0616 is a format-string vulnerability in the McAfee ePolicy Orchestrator (ePO) server, affecting versions 2.0, 2.5, and 2.5.1. The issue resides in the ComputerList parameter where a POST request containing format specifiers is logged when a name resolution fails, potentially enabling re...
CVE-2003-0148
The CVE-2003-0148 entry concerns a vulnerability in the default MSDE installation used with McAfee ePolicy Orchestrator (ePO) 2.0–3.0. The issue allows an attacker who can access the ePO server to obtain the database administrator username and the encrypted password from the server config file. T...
CVE-2003-0148
The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that 1 obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, 2 crack t...
CVE-2003-0610
Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request...
CVE-2003-0149
Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters...
CVE-2003-0616
Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution...
CVE-2003-0149
CVE-2003-0149: ePolicy Orchestrator (McAfee) with Agent 2.0/2.5/2.5.1 is affected by a Heap Overflow in the Agent. A remote attacker can trigger arbitrary code execution by sending a POST request with long parameters to the Agent. The issue is documented alongside other ePO vulnerabilities; a ven...
CVE-2003-0610
The CVE-2003-0610 entry describes a directory traversal vulnerability in the ePO agent of McAfee ePolicy Orchestrator 3.0. Affected component: ePO agent; vulnerability arises from improper handling of HTTP requests, enabling a remote attacker to read arbitrary files on the host. Impact is partial...
