McAfee VirusScan Engine buffer overflow vulnerability

Overview McAfee VirusScan Engine contains a buffer overflow vulnerability. Impact A buffer overflow may occur when scanning a malformed LHA file. Solution None...

Update Protection against McAfee ePolicy Orchestrator Framework Services HTTP Buffer Overflow Vulnerability

A buffer overflow vulnerability was reported in the McAfee ePolicy Orchestrator ePO Framework Services. McAfee ePolicy Orchestrator is a central management system to enforce and monitor system security. A remote attacker could exploit this issue to execute arbitrary code on the affected system...

Security feature bypass

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

CVE-2008-1855

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

CVE-2008-1855

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

CVE-2008-1855

CVE-2008-1855 affects McAfee Common Management Agent (CMA) FrameworkService.exe in CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot. The vulnerability allows an unauthenticated, remote attacker to trigger a memory corruption in CMA FrameworkService via ...

CVE-2008-1855: Undefined Security Weakness

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

McAfee ePolicy Orchestrator FrameworkService.exe远程拒绝服务漏洞

BUGTRAQ ID: 28573 McAfee ePolicy Orchestrator（ePO）是一种业界领先的系统安全管理解决方案，能够帮助企业有效抵御各种恶意威胁和攻击。 ePO中所使用的McAfee框架服务（FrameworkService.exe）中存在安全漏洞，如果远程攻击者向该服务的默认8081/TCP端口发送了特制请求的话，就可能触发内存破坏，导致服务崩溃。 0 McAfee ePolicy Orchestrator 4.0 McAfee ePolicy Orchestrator 3.6.x McAfee CMA 3.6.0 McAfee ProtectionPilot...

mcafeeepo-dos.txt

!/usr/bin/python Mcafee EPO 4.0 and others FrameworkService.exe DOS More than meets the eye Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/mcafeeagain.py.txt EAX 00840C30 ECX 00837830 EDX 01EACF18 EBX 00004000 ESP 01EAFF04 EBP 01EAFF38...

Mcafee EPO 4.0 FrameworkService.exe Remote Denial of Service Exploit

No description provided by source. !/usr/bin/python Mcafee EPO 4.0 and others FrameworkService.exe DOS More than meets the eye Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/mcafeeagain.py.txt EAX 00840C30 ECX 00837830 EDX 01EACF18...

McAfee Common Management Agent 3.6.0 UDP Packet Handling Format String (credentialed check)

The remote host is running a Common Management Agent, a component of the ePolicy Orchestrator system security management solution from McAfee. The version of the Common Management Agent on the remote host is earlier than 3.6.0.595 and, as such, contains a format string vulnerability. If configure...

McAfee Common Management Agent < 3.6.0.595 UDP Packet Handling Format String

According to its banner, the version of McAfee Common Management Agent CMA running on the remote host is prior to 3.6.0.595. It is, therefore, affected by a flaw in the logDetail function of applib.dll due to calling vsnwprintf without the needed format string argument. An unauthenticated, remote...

Mcafee EPO 4.0 FrameworkService.exe Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ==================================================================== Mcafee EPO 4.0 FrameworkService.exe Remote Denial of Service Exploit ==================================================================== !/usr/bin/python Mcafee EPO 4.0 and...

Mcafee EPO 4.0 - FrameworkService.exe Remote Denial of Service

Mcafee EPO 4.0 - FrameworkService.exe Remote Denial of Service !/usr/bin/python Mcafee EPO 4.0 and others FrameworkService.exe DOS More than meets the eye Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/mcafeeagain.py.txt EAX 00840C30 E...

Mcafee EPO 4.0 - 'FrameworkService.exe' Remote Denial of Service

!/usr/bin/python Mcafee EPO 4.0 and others FrameworkService.exe DOS More than meets the eye Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/mcafeeagain.py.txt EAX 00840C30 ECX 00837830 EDX 01EACF18 EBX 00004000 ESP 01EAFF04 EBP 01EAFF38...

CVE-2008-1357

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...

Format string

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...

CVE-2008-1357

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...

CVE-2008-1357

CVE-2008-1357 affects McAfee CMA 3.6.0.574 (Patch 3) and earlier, used with ePolicy Orchestrator 4.0.0 build 1015. The vulnerability is in the logDetail function of applib.dll and stems from a format string issue in the UDP AgentWakeup handling (port 8082) that can leak into the format string spe...

CVE-2008-1357: Use of Externally-Controlled Format String

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...