5186 matches found
CVE-2003-0149: Undefined Security Weakness
Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters...
CVE-2003-0616: Undefined Security Weakness
Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution...
ePolicy Orchestrator multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: ePolicy Orchestrator multiple vulnerabilities Release Date: 07/31/2003 Application: McAfee ePolicy Orchestrator 2.X and 3.0 Platform: Windows Severity: Remote code execution Author: Andreas...
CVE-2003-0148: Undefined Security Weakness
The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that 1 obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, 2 crack t...
CVE-2003-0610: Undefined Security Weakness
Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request...
Multiple McAfee ePolicy Orchestrator bugs
Buffer overflows, format string bugs, MSDE is installed in insecure configuration...
CVE-2002-0690
Format string vulnerability in McAfee Security ePolicy Orchestrator ePO 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings...
CVE-2000-0502
Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion...
CVE-2000-0502
Mcafee VirusScan 4.03 is affected by a local-access restriction flaw in the alert text file before it is sent to the Central Alert Server, allowing local users to modify alerts and impact the integrity of alert data. The root cause is improper access restriction of the alert file, enabling unauth...
CVE-2000-0502: Undefined Security Weakness
Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion...
CVE-2002-0690
McAfee Security ePolicy Orchestrator (ePO) 2.5.1 is affected by CVE-2002-0690, a format-string vulnerability in the HTTP GET request path that can allow remote code execution with SYSTEM privileges. The issue stems from processing of network requests (port 8081) and can enable arbitrary code exec...
CVE-2002-0690
Format string vulnerability in McAfee Security ePolicy Orchestrator ePO 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings...
CVE-2002-0690: Undefined Security Weakness
Format string vulnerability in McAfee Security ePolicy Orchestrator ePO 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings...
McAfee ePolicy Orchestrator Format String Vulnerability (a031703-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: ePolicy Orchestrator Format String Vulnerability Release Date: 03/17/2003 Application: McAfee ePolicy Orchestrator 2.5.1 Platform: Windows 2000 Server SP1 Windows 2000 Pro SP1 Severity: The...
McAfee ePolicy Orchestrator format string bug
Format string bug during network request processing...
CVE-2002-2282
McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs...
CVE-2001-1144
CVE-2001-1144 affects McAfee ASaP VirusScan agent 1.0, exposing a directory traversal vulnerability in the HTTP server that allows remote attackers to read arbitrary files via …/ in requests. Exploitation details in connected docs indicate the vulnerable component is the VirusScan ASaP HTTP servi...
CVE-2001-1144
Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP request...
CVE-2001-1144: Undefined Security Weakness
Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP request...