CVE-2000-1128

The CVE describes a local privilege escalation in McAfee VirusScan 4.5 caused by not quoting ImagePath, which can allow a local user to place a Trojan executable (common.exe) in C:\Program Files by altering the search path. The affected component is the VirusScan service/installation that reads t...

CVE-2000-1129

McAfee WebShield SMTP 4.5 is affected. The issue is a vulnerability in SMTP recipient handling where a malformed recipient field can trigger a remote denial of service. Documents confirm the affected product and the attack vector (remote/network) with a partial availability impact; no explicit re...

CVE-2000-1129

McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field...

CVE-2000-1128

The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse "common.exe" program in the C:\Program Files directory...

CVE-2000-1130

McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment...

McAfee WebShield SMTP 4.5 Multiple Vulnerabilities

The remote WebShield server is subject to two flaws : - It may let mail pass against some filter rules if the attached files names have some strange chars in them - It is possible for an outsider to crash this program and force its reinstallation Nessus did not actually test for these flaws - it...

McAfee WebShield SMTP vulnerabilities

McAfee WebShield SMTP v4.5 have at least two vulnerabilities. One with content filter and other with smtp recepient field DoS. Network Associates has been informed 7.11.2000 cont filt and 17.11.2000 recepient field. Vulnerability occures at least NT4sp5 and sp6 installations. Mailformed SMTP...

McAfee VirusScan 4.5 Unquoted ImagePath Vulnerability

Description The default installation of McAfee VirusScan excludes quotes around the image path eg. ImagePath=C:\Program Files\Common Files\Network Associates\McShield\McShield.exe. Therefore, if a malicious user were to insert a hostile VB executable file named common.exe in C:\Program Files, it...

CVE-2000-0502

Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion...

Linux news 6.04.00

Обновлен список работ для 2.4 Alan обновил список работ, которые необходимо выполнить для ядра 2.4. Подробнее: http://www.linuxtoday.org/stories/19479.html Kernel Traffic 61 Вышел очередной Kernel Traffic, за номером 61. Подробнее: http://www.linuxtoday.com McAfee VirusScan for Linux...

CVE-2000-0119

The CVE-2000-0119 entry describes a vulnerability in McAfee VirusScan and Norton Anti-Virus where default configurations do not scan files in the Windows Recycle Bin’s RECYCLED folder. This allows an attacker to store malicious code undetected within that folder. The root cause is the failing to ...

CVE-2000-0119

The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection...

CVE-2000-0119

The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection...

seagate.backup.exec.vb.txt

Date: Tue, 16 Feb 1999 11:59:30 -0800 From: Jeffrey Monroe To: [email protected] Subject: Backup Exec/McAfee Virus We have found that the Seagate Backup Exec virus scanning software McAfee can delete "non-infected" Visual Basic class files. Anyone creating custom software could fin...