McAfee VirusScan for Mac (Virex) 7.7 - Local Privilege Escalation

!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Following symlinks is bad mmmmmmmmmmkay! $dest = "/var/cron/tabs/root"; $tgts"0" = "Virex 7.7.dmg:"/Library/Application Support/Virex/VShieldExclude.txt" "; unless $target = @ARGV print "\n\nUsage: $0...

McAfee Virex fails to properly authenticate the source of updates

Overview McAfee Virex automatic updates may not properly authenticate the source of updates. This may allow a remote attacker to execute arbitrary commands on a vulnerable system. Description McAfee Virex is anti-virus software for the Mac OS X platform. McAfee Virex 7 for Mac OS X connects to a...

McAfee NeoTrace ActiveX控件远程缓冲区溢出漏洞

McAfee NeoTrace是一款跟踪路由数据包的应用程序。 NeoTraceExplorer.NeoTraceLoader ActiveX存在边界条件问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者必须构建恶意WEB页，诱使用户访问来触发，目前没有详细漏洞细节提供。 0 McAfee NeoTrace Professional 3.25 McAfee NeoTrace Express 3.25 目前没有解决方案提供： a href="http://www.networkingfiles.com/PingFinger/Neotraceexpress.htm"...

CVE-2006-6707

Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control NeoTraceExplorer.dll in NeoTrace Express 3.25 and NeoTrace Pro aka McAfee Visual Trace 3.25 allows remote attackers to execute arbitrary code via a long argument string to the TraceTarget method. NOTE: The provenan...

McAfee VirusScan For Linux不安全DT_RPATH变量远程执行代码漏洞

McAfee VirusScan for Linux是Linux平台下的商业杀毒解决方案。 McAfee VirusScan for Linux的搜索路径不可信任，可能会在DTRPATH环境变量中包含当前工作目录，这可能允许本地用户通过在该目录安装恶意的函数库导致加载任意ELF DSO库，执行任意代码。 0 McAfee Virus Scan for Linux 4510e 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： a href="http://www.mcafee.com/"...

CVE-2006-6474

Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DTRPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directo...

CVE-2006-6474

Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DTRPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directo...

CVE-2006-6474

The CVE-2006-6474 entry concerns McAfee VirusScan for Linux 4510e and earlier, where the DT_RPATH environment variable includes the current working directory. This insecure DT_RPATH can allow a local attacker to have the dynamic loader load untrusted ELF DSOs and execute arbitrary code by placing...

McAfee VirusScan: Insecure DT_RPATH

Background McAfee VirusScan for Linux is a commercial antivirus solution for Linux. Description Jakub Moc of Gentoo Linux discovered that McAfee VirusScan was distributed with an insecure DTRPATH which included the current working directory, rather than $ORIGIN which was probably intended. Impact...

CVE-2006-6474: Undefined Security Weakness

Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DTRPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directo...

GLSA-200612-15 : McAfee VirusScan: Insecure DT_RPATH

The remote host is affected by the vulnerability described in GLSA-200612-15 McAfee VirusScan: Insecure DTRPATH Jakub Moc of Gentoo Linux discovered that McAfee VirusScan was distributed with an insecure DTRPATH which included the current working directory, rather than $ORIGIN which was probably...

[Full-disclosure] Vulnerabilities in Client Service for NetWare

McAfee, Inc. McAfeer Avertr Labs Security Advisory Public Release Date: 2006-11-16 Vulnerabilities in Client Service for NetWare CVE-2006-4688, CVE-2006-4689 Synopsis The Client Service for NetWare CSNW allows a Windows client to access NetWare file, print, and directory services. Successful...

Preemptive Protection against McAfee HTTP Server Buffer Overflow Vulnerability

McAfee ePolicy Orchestrator provides proactive defense against malicious threats and attacks. McAfee ProtectionPilot is a centralized system security manager designed specifically for businesses with up to 500 systems.A vulnerability has been reported in McAfee ePolicy Orchestrator and in McAfee...

Exploits Mcafee Network Agent (mcnasvc.exe) Remote DoS

No description provided by source. ///////////////////////////////////////////////////// // Mcafee Network Agent mcnasvc.exe Remote DoS // By JAAScois http://www.jaascois.com // Teston mcnasvc.exe ver1.0.178.0 // Path C:\Program Files\Common Files\McAfee\MNA // Port: 6646...

McAfee产品查验管理器栈溢出漏洞

McAfee产品查验管理器（McAfee Subscription Manager）是随McAfee很多产品一起发布的用于管理产品许可权限组件，它是一个ActiveX控件，厂商可以通过它检查产品的使用合法性。 McAfee产品查验管理器实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 产品查验管理器的实现模块McSubMgr.dll没有检查传入的参数长度，远程攻击者可以诱使用户访问恶意网站，在网页脚本中向McSubMgr.dll传送超过3000字节长的数据导致发生栈溢出，从而执行任意指令。 0 McAfee VirusScan 9.x McAfee...

Mcafee SecurityCenter远程命令执行漏洞

McAfee SecurityCenter是集中的基于Web的管理控制台，提供了报告和配置控制。 McAfee SecurityCenter及其他用户产品中存在多个漏洞，允许攻击者在有漏洞的系统上执行任意命令，导致完全入侵系统。 漏洞的利用需要用户被诱骗访问恶意网页或在收到邮件时执行某些形式的交互操作。 McAfee SecurityCenter 6.0.22 McAfee SecurityCenter 6.0 McAfee SecurityCenter 4.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

McAfee EPolicy Orchestrator和ProtectionPilot HTTP Server远程缓冲区溢出漏洞

McAfee Security ePolicy Orchestrator是一款企业级反病毒管理工具。 ePolicy Orchestrator及ProtectionPilot所带的HTTP Server在处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 ePolicy Orchestrator及ProtectionPilot在处理HTTP请求中的超长Source头选项数据时存在缓冲区溢出，远程攻击者可能通过超长的精心构造的数据溢出缓冲区执行任意指令。 0 McAfee ePolicy Orchestrator = 3.5 patch 5 McAfee...

InnerMedia DUNZIP32.dll远程栈溢出漏洞

DUNZIP32.dll是一个流行的第三方压缩媒体库。 很多应用程序都用到了DUNZIP32.dll做为压缩库。DUNZIP32.dll在解压有超长用户名的压缩文件时存在栈溢出漏洞，可能允许攻击者在用户系统上执行任意代码。 0 McAfee VirusScan 10.x Real Networks RealPlayer 10.5 Real Networks RealPlayer 10 Real Networks RealOne Player 2.0 IBM Lotus Notes = 5.0.10 IBM Lotus Notes 6.5.4 McAfee SecurityCenter 6...

McAfee ePo 3.5.0 / ProtectionPilot 1.1.0 (Source) Remote Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

CVE-2006-5417

McAfee Network Agent mcnasvc.exe 1.0.178.0, as used by multiple McAfee products possibly including Internet Security Suite, Personal Firewall Plus, and VirusScan, allows remote attackers to cause a denial of service agent crash via a long packet, possibly because of an invalid string position fie...