CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the 1 fullAccess or 2 fullAccessRight parameter in reports-column-center.jsp, or 3 fullAccess...

CVE-2005-2186: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to inject arbitrary web script or HTML via the 1 thirdMenuName or 2 resourceName parameter to SystemEvent.jsp...

CVE-2005-2188: Undefined Security Weakness

McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack...

CVE-2005-2187: Undefined Security Weakness

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the 1 fullAccess or 2 fullAccessRight parameter in reports-column-center.jsp, or 3 fullAccess...

McAfee Intrushield IPS Abuse

/ $ An open security advisory 8 - McAfee Intrushield IPS Management Console Abuse 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...

McAfeeIPS.txt

------=Part1341925560245.1120660746428 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline / = $ An open security advisory 8 - McAfee Intrushield IPS Management Console= =20 Abuse = 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2:...

McAfee IntruShield Security Management System - Multiple Vulnerabilities

McAfee IntruShield Security Management System - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/14167/info McAfee IntruShield Security Management System is susceptible to multiple vulnerabilities. The first two issues are cross-site scripting vulnerabilities in the...

McAfee IntruShield Security Management System - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/14167/info McAfee IntruShield Security Management System is susceptible to multiple vulnerabilities. The first two issues are cross-site scripting vulnerabilities in the 'intruvert/jsp/systemHealth/SystemEvent.jsp' script. These issues are due to a failur...

CVE-2004-1906

Mcafee FreeScan is affected by CVE-2004-1906. A long string in the ScanParam property of a COM object can trigger a buffer overflow, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The vulnerability impact is noted as Partial availability impact with...

CVE-2004-1908

The CVE-2004-1908 issue concerns McAfee FreeScan’s CoMcFreeScan ActiveX object. A design flaw in FreeScan’s scanning component allows remote attackers to obtain sensitive file-system information (via GetSpecialFolderLocation with certain parameters), and a second vulnerability can terminate appli...

CVE-2004-1906

Mcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code via a long string in the ScanParam property of a COM object, which may trigger a buffer overflow...

CVE-2004-1908

McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via the GetSpecialFolderLocation function with certain parameters...

CVE-2004-1906: Undefined Security Weakness

Mcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code via a long string in the ScanParam property of a COM object, which may trigger a buffer overflow...

CVE-2005-0644

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643...

CVE-2005-0643

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files...

McAfee Internet Security personal firewall / antivirus software weak permissions

Weak permissions for installation folder...

[Full-disclosure] iDEFENSE Security Advisory 04.18.05: McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability

McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability iDEFENSE Security Advisory 04.18.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 18, 2005 I. BACKGROUND McAfee Internet Security Suite 2005 is a product used to protect a personal computer fro...

CVE-2005-1107

McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modifying certain files...

CVE-2005-1107

McAfee Internet Security Suite 2005 is affected by an insecure default file ACL vulnerability. According to iDEFENSE, the default ACL applied during installation allows non-Administrator users to modify installed files, enabling local privilege escalation to system level or to disable protection ...

CVE-2005-1107: Undefined Security Weakness

McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable protection by modifying certain files...