5186 matches found
CVE-2007-1498: Undefined Security Weakness
Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control SiteManager.dll in the ePO management console in McAfee ePolicy Orchestrator ePO before 3.6.1 Patch 1 and ProtectionPilot PRP before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument...
ePolicy Orchestrator SiteManager ActiveX Control Multiple Buffer Overflows
The version of the SiteManager ActiveX control included with McAfee ePolicy Orchestrator or ProtectionPilot and installed on the remote host reportedly contains several buffer overflows. If an attacker can trick a user on the affected host into visiting a specially crafted web page, this issue...
McAfee ePolicy Orchestrator ActiveX multiple buffer overflows
Buffer overflows in SiteManager.Dll ExportSiteList and VerifyPackageCatalog functions...
[Full-disclosure] [Advisory]McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities
hi full-disclosure, McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities by cocoruder of FSRTFortinet Security Research Team hfliatfortinet.com Summary: Multiple remote buffer overflow vulnerabilities exist in the ActiveX Control named "SiteManager.Dll" of McAfee ePolicy...
Netragard Security Advisory 2007-02-20
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Netragard, L.L.C Advisory Strategic Reconnaissance Team ------------------------------------------------ http://www.netragard.com -- "We make I.T. Safe." POSTING NOTICE - ----------------------------------------------------------------------- If you...
Command injection
VShieldCheck in McAfee VirusScan for Mac Virex before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands...
Code injection
McAfee VirusScan for Mac Virex before 7.7 patch 1 has weak permissions 0666 for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files...
CVE-2007-1226
McAfee VirusScan for Mac Virex before 7.7 patch 1 has weak permissions 0666 for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files...
CVE-2007-1227
VShieldCheck in McAfee VirusScan for Mac Virex before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands...
CVE-2007-1226
McAfee VirusScan for Mac Virex before 7.7 patch 1 has weak permissions 0666 for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files...
CVE-2007-1227
VShieldCheck in McAfee VirusScan for Mac Virex before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands...
CVE-2007-1226
CVE-2007-1226 affects McAfee VirusScan for Mac (Virex) prior to 7.7 patch 1, where /Library/Application Support/Virex/VShieldExclude.txt has weak permissions (0666). Local users could modify the exclude list and cause Virex to skip scanning of arbitrary files, impacting confidentiality/integrity/...
CVE-2007-1227
CVE-2007-1227 affects McAfee VirusScan for Mac (Virex) prior to 7.7 patch 1. The issue is a local privilege escalation via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, allowing a local user to change permissions of arbitrary files by symlinking to a sensitive target ...
CVE-2007-1227: Undefined Security Weakness
VShieldCheck in McAfee VirusScan for Mac Virex before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands...
CVE-2007-1226: Undefined Security Weakness
McAfee VirusScan for Mac Virex before 7.7 patch 1 has weak permissions 0666 for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files...
McAfee VirusScan for Mac (Virex) <= 7.7 Local Root Exploit
Exploit for macOS platform in category local exploits ========================================================== McAfee VirusScan for Mac Virex \n\nTargets:\n\n"; foreach $key sortkeys %tgts $a,$b = split/:/,$tgts"$key"; print "\t$key . $a\n"; print "\n"; exit 1; $a,$b = split/:/,$tgts"$target";...
McAfee VirusScan for Mac (Virex) <= 7.7 Local Root Exploit
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Following symlinks is bad mmmmmmmmmmkay! $dest = "/var/cron/tabs/root"; $tgts"0" = "Virex 7.7.dmg:"/Library/Application Support/Virex/VShieldExclude.txt" "; unless $target...
McAfee VirusScan for Mac (Virex) 7.7 - Local Privilege Escalation
McAfee VirusScan for Mac Virex 7.7 - Local Privilege Escalation !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Following symlinks is bad mmmmmmmmmmkay! $dest = "/var/cron/tabs/root"; $tgts"0" = "Virex 7.7.dmg:"/Library/Application...
McAfee Virex Virus Scan for Mac OS X symbolic links problem and protection bypass
Weak permissions and symbolic links problem on /Library/Application/Sypport/Virex/VShieldExecute.txt file creation...
[NETRAGARD-20070220 SECURITY ADVISORY] [McAfee VirusScan for Mac (Virex) Local root exploit and Scan Bypass]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Netragard, L.L.C Advisory Strategic Reconnaissance Team ------------------------------------------------ http://www.netragard.com -- "We make I.T. Safe." POSTING NOTICE - ----------------------------------------------------------------------- If you...