CVE-2004-0831

CVE-2004-0831 concerns McAfee VirusScan 4.5.1. The vulnerability arises when using the System Scan options in the System Tray applet, where the process does not drop SYSTEM privileges before enabling users to browse for files, potentially allowing local privilege escalation. The description provi...

CVE-2004-0831: Undefined Security Weakness

McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges...

CVE-2004-0831

McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges...

CVE-2004-0095

McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service memory consumption and crash and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow...

CVE-2004-0095

The vulnerability CVE-2004-0095 affects the McAfee ePolicy Orchestrator agent. It stems from improper handling of HTTP POST Content-Length values, potentially allowing a buffer overflow that can lead to memory consumption, denial of service, and possibly arbitrary code execution. Affected compone...

CVE-2001-0612

CVE-2001-0612 affects McAfee Remote Desktop 3.0 and earlier. The vulnerability allows a remote attacker to cause a denial of service (crash) by sending a large number of packets to port 5045. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network access, no authentication, and part...

CVE-2004-0095: Undefined Security Weakness

McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service memory consumption and crash and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow...

CVE-2001-0612: Undefined Security Weakness

McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service crash via a large number of packets to port 5045...

McAfee ePolicy Orchestrator Remote Format String

Binary data 1895.prm...

McAfee WebShield < 4.5 MR2 Bounced Emails Format String

Binary data 3504.prm...

CVE-2004-0038

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

McAfee ePolicy Orchestrator unauthorized access

Invalid HTTP POST request allows to upload files on server...

ISS Security Brief: McAfee ePolicy Orchestrator Remote Compromise Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief May 10, 2004 McAfee ePolicy Orchestrator Remote Compromise Vulnerability Synopsis: ISS X-Force has discovered a vulnerability in the McAfee ePolicy Orchestrator software. ePolicy Orchestrator ePO enables the enterprise...

[Full-Disclosure] LHa repercussions: WinZip, WinRar, CommuniGate Pro McAfee plugin, blog

According to various sources on the net, the vulnerable LHa code has been used in other products. SecurityFocus says that WinZip and WinRar also are vulnerable to the LHa buffer overflows: http://www.securityfocus.com/bid/10243/info/ I have found a mailing list discussion about my LHa test archiv...

CVE-2004-0038

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

CVE-2004-0038

CVE-2004-0038 affects McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3. The vulnerability is in the spipe/file handler and enables remote command execution via certain HTTP POST requests to ePO on TCP port 81. The available descriptions identify arbitrary command execution wi...

CVE-2004-0038: Undefined Security Weakness

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

McAfee Freescan ActiveX Information Disclosure [Additional Details & PoC]

McAfee Freescan ActiveX Information Disclosure Additional Details & PoC ------------------------------------------------------------------------- I. ABSTRACT: McAfee Freescan is an online ActiveX based Antivirus utility. II. DESCRIPTION: I've been working on an information disclosure vulnerabilit...

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure

Mcafee FreeScan CoMcFreeScan Browser - Information Disclosure source: https://www.securityfocus.com/bid/10077/info Reportedly the Mcafee FreeScan 'McFreeScan.CoMcFreeScan.1' COM object is prone to a remote information disclosure vulnerability. This issue is due to a failure of the object to...

[Full-Disclosure] Mcafee FreeScan - Remote Buffer Overflow and Private Information Disclosure

Application: Mcafee FreeScanactivex Vendors: http://us.mcafee.com/root/mfs/default.asp?cid=9914 Platforms: Windows Bug: Buffer Overflow and Private Information Disclosure Risk: High - Running Arbitary Code Exploitation: Remote with browser Date: 1 Apr 2004 Author: Rafel Ivgi, The-Insider e-mail:...