GLSA-200608-01 : Apache: Off-by-one flaw in mod_rewrite

The remote host is affected by the vulnerability described in GLSA-200608-01 Apache: Off-by-one flaw in modrewrite An off-by-one flaw has been found in Apache's modrewrite module by Mark Dowd of McAfee Avert Labs. This flaw is exploitable depending on the types of rewrite rules being used. Impact...

CVE-2006-3961

The CVE-2006-3961 vulnerability is a stack buffer overflow in the McAfee Subscription Manager ActiveX control (mcsubmgr.dll) used by McAfee Security Center and related products. A long/ crafted input passed to versus printf-family code (vsprintf) can overflow the stack, potentially allowing remot...

Apache: Off-by-one flaw in mod_rewrite

Background The Apache HTTP server is one of the most popular web servers on the Internet. The Apache module modrewrite provides a rule-based engine to rewrite requested URLs on the fly. Description An off-by-one flaw has been found in Apache's modrewrite module by Mark Dowd of McAfee Avert Labs...

CVE-2006-3961: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in McSubMgr ActiveX control mcsubmgr.dll in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute...

McAfee Subscription Manager Stack Buffer Overflow

This module exploits a flaw in the McAfee Subscription Manager ActiveX control. Due to an unsafe use of vsprintf, it is possible to trigger a stack buffer overflow by passing a large string to one of the COM-exposed routines, such as IsAppExpired. This vulnerability was discovered by Karl Lynn of...

apache -- mod_rewrite buffer overflow vulnerability

The Apache Software Foundation and The Apache HTTP Server Project reports: An off-by-one flaw exists in the Rewrite module, modrewrite, as shipped with Apache 1.3 since 1.3.28, 2.0 since 2.0.46, and 2.2 since 2.2.0. Depending on the manner in which Apache HTTP Server was compiled, this software...

CVE-2006-3623

Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. dot dot in the directory and filename in a PropsResponse PackageType request...

McAfee ePolicy Orchestrator / ProtectionPilot Overflow

This is an exploit for the McAfee HTTP Server NAISERV.exe. McAfee ePolicy Orchestrator 2.5.1 use exploit/windows/http/mcafee/epolicysource msf undefinedepolicysource show actions ...actions... msf undefinedepolicysource set ACTION msf undefinedepolicysource show options ...show and set options...

CVE-2006-3623

CVE-2006-3623 affects the McAfee ePolicy Orchestrator agent (Framework Service) prior to 3.5.0.x, where a directory traversal via a .. sequence in a PropsResponse (PackageType) request allows remote, unauthenticated attackers to create arbitrary files. The issue is a path traversal vulnerability ...

CVE-2006-3623

Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. dot dot in the directory and filename in a PropsResponse PackageType request...

McAfee Common Management Agent Traversal Arbitrary File Write

According to its banner, the McAfee Common Management Agent CMA running on the remote host is affected by a directory traversal vulnerability in the Framework Service component due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a special...

EEYE: McAfee ePolicy Orchestrator Remote Compromise

McAfee ePolicy Orchestrator Remote Compromise Release Date: July 13, 2006 Severity: High Remote Code Execution Vendor: McAfee Systems Affected: McAfee Common Management EPO Agent versions below version 3.5.5.438 Overview: McAfee ePolicy Orchestrator is the remote security management software for...

[SA21037] McAfee ePolicy Orchestrator Directory Traversal Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

CVE-2006-3623: Undefined Security Weakness

Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. dot dot in the directory and filename in a PropsResponse PackageType request...

McAfee ePolicy Orchestrator directory traversal

It's possible to access any files with TCP/8081 interface...

CVE-2006-3575

Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service unstable operation via a long string in the 1 "Process name", 2 "Module name", or 3 "API name" fields...

CVE-2006-3575

Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service unstable operation via a long string in the 1 "Process name", 2 "Module name", or 3 "API name" fields...

CVE-2006-3575

CVE-2006-3575 refers to an unknown vulnerability in the Buffer Overflow Protection of McAfee VirusScan Enterprise 8.0.0. The issue allows local users to cause a denial of service (unstable operation) by supplying an excessively long string in any of the fields: Process name, Module name, or API n...

CVE-2006-3575: Undefined Security Weakness

Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service unstable operation via a long string in the 1 "Process name", 2 "Module name", or 3 "API name" fields...

[Full-disclosure] Microsoft SMB Information Disclosure Vulnerability CVE-2006-1315

McAfee, Inc. McAfee® Avert® Labs Security Advisory Public Release Date: 2006-07-11 SMB Information Disclosure Vulnerability CVE-2006-1315 • Synopsis An information disclosure vulnerability exists in the Server service that could allow an attacker to retrieve fragments of memory from an affected...