McAfee Framework _naimcomn_Log远程格式串处理漏洞

BUGTRAQ ID: 28228 McAfee Framework是McAfee ePolicy Orchestrator中所实现的用于创建各种McAfee产品服务的框架。 McAfee Framework所安装的applib.dll库中的logDetail函数缺少必要的格式参数便调用了vsnwprintf，远程攻击者可能利用此漏洞控制服务器。 在McAfee ePolicy Orchestrator中可通过发送单个带有畸形sender、package或computer字段的UDP报文来触发这个漏洞。输出日志文件AgentHOSTNAME.log位于Db文件夹中。 0 McAfee...

McAfee Framework / ePolicy Orchestrator format string vulnerability

Format string vulnerability in logging functions...

Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)

Luigi Auriemma Application: McAfee Framework implemented in McAfee ePolicy Orchestrator 4.0 http://www.mcafee.com/us/enterprise/products/systemsecuritymanagement/epolicyorchestrator.html Versions: = 3.6.0.569 Platforms: Windows Bug: format string in naimcomnLog Exploitation: remote Date: 12 Mar...

McAfee Framework ePolicy 3.x - Orchestrator _naimcomn_Log Remote Format String

McAfee Framework ePolicy 3.x - Orchestrator naimcomnLog Remote Format String source: https://www.securityfocus.com/bid/28228/info McAfee Framework is prone to a remote format-string vulnerability. Exploiting this issue will allow attackers to execute arbitrary code with the permissions of the...

McAfee Framework ePolicy 3.x - Orchestrator '_naimcomn_Log' Remote Format String

source: https://www.securityfocus.com/bid/28228/info McAfee Framework is prone to a remote format-string vulnerability. Exploiting this issue will allow attackers to execute arbitrary code with the permissions of the framework or of an application that uses the framework. Failed attacks will like...

VMSA-2008-0004:Updated e2fsprogs service console package

VMSA-2008-0004.1 Updated e2fsprogs service console package VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0004.1 VMware Security AdvisorySynopsis: Updated e2fsprogs service console package VMware Security AdvisoryIssue date: 2008-03-03 VMware Security AdvisoryUpdated on:...

McAfee E-Business Server预认证远程拒绝服务及代码执行漏洞

BUGTRAQ ID: 27197 McAfee e-Business Server用于为存储和共享文档的企业和个人提供透明加密。 McAfee E-Business Server在处理畸形格式的请求数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 如果向McAfee E-Business Server的管理接口（TCP 1718）发送类似于以下的畸形预认证报文的话： "\x01\x3f\x2f\x05\x25\x2a" + "A" 69953 就会导致服务器崩溃，也可能允许执行任意指令。 0 McAfee E-Business Server = 8.5.2 for Windows...

Authentication flaw

The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary code via a long initial authentication packet...

CVE-2008-0127

The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary code via a long initial authentication packet...

CVE-2008-0127

The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary code via a long initial authentication packet...

CVE-2008-0127

CVE-2008-0127 affects McAfee E-Business Server (administration interface) versions 8.5.2 and earlier. The vulnerability arises from improper handling of oversized authentication packets, allowing an unauthenticated remote attacker to crash the service (DoS) and potentially execute arbitrary code....

CVE-2008-0127: Improper Restriction of Operations within the Bounds of a Memory Buffer

The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service crash and execute arbitrary code via a long initial authentication packet...

McAfee E-Business Server Authentication Packet Remote Overflow

McAfee E-Business Server, an enterprise tool for digitally encrypting and signing electronic files, is installed on the remote host. The version of this software installed on the remote host fails to properly handle over-sized authentication packets sent to its administration interface, generally...

McAfee E-Business Server Remote pre-auth Code Execution / DoS PoC

No description provided by source. !/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic [email protected], Infigo IS http://www.infigo.hr/en/ use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718;...

mcafee2.pl.txt

!/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic , Infigo IS use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718; $exp1 = "\x01\x3f\x2f\x05\x25\x2a" . "A" x 69953;; print " Sending exploit string...\n"; my $serversock =...

McAfee E-Business Server Remote pre-auth Code Execution / DoS PoC

Exploit for multiple platform in category dos / poc ================================================================= McAfee E-Business Server Remote pre-auth Code Execution / DoS PoC ================================================================= !/usr/bin/perl McAfeeR E-Business ServerTM 8.5....

KLA10260 ACE vulnerability in McAfeeE-Buisness Server

An unspecified vulnerability was found in McAfee E-Business. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed auth packet. Original advisories - Exploitation Public exploits exist for this...

McAfee E-Business Server 8.5.2 - Remote Code Execution Denial of Service (PoC)

McAfee E-Business Server 8.5.2 - Remote Code Execution Denial of Service PoC !/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic , Infigo IS use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718; $exp1 = "\x01\x3f\x2f\x05\x25\x2a"...

McAfee E-Business Server buffer overflow

TCP/1718 administration interface buffer overflow...

McAfee E-Business Server 8.5.2 - Remote Code Execution / Denial of Service (PoC)

!/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic , Infigo IS use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718; $exp1 = "\x01\x3f\x2f\x05\x25\x2a" . "A" x 69953;; print " Sending exploit string...\n"; my $serversock =...