McAfee ePolicy Orchestrator / ProtectionPilot Overflow

No description provided by source. $Id: mcafeeepolicysource.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

McAfee ePolicy Orchestrator / ProtectionPilot - Remote Overflow (Metasploit)

$Id: mcafeeepolicysource.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

McAfee ePolicy Orchestrator / ProtectionPilot Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'McAfee ePolicy Orchestrator /...

CVE-2008-1855: Undefined Security Weakness

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

CVE-2006-5272

Stack-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted ping packet...

CVE-2006-5271

Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet, which causes stack corruption...

CVE-2006-5274

Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.5.5.438 allows remote attackers to cause a denial of service CMA Framework service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2006-5272: Undefined Security Weakness

Stack-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted ping packet...

CVE-2006-5273: Undefined Security Weakness

Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet...

CVE-2006-5272

The CVE-2006-5272 issue affects McAfee CMA (Common Management Agent) prior to 3.6.0.546. A stack-based buffer overflow in the CMA component occurs when handling certain ping packets received over the network, enabling a remote attacker to potentially execute arbitrary code. Affected versions incl...

CVE-2006-5271: Undefined Security Weakness

Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet, which causes stack corruption...

CVE-2006-5273

The CVE-2006-5273 entry describes a heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5–3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438–3.6.0.453. The vulnerability allows remote attackers to execute arbitrary code via a crafted packet. Connected docume...

CVE-2006-5274: Undefined Security Weakness

Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.5.5.438 allows remote attackers to cause a denial of service CMA Framework service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2006-5272

Stack-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted ping packet...

McAfee ePolicy Orchestrator and ProtectionPilot ActiveX control buffer overflow vulnerability

Overview A vulnerability in an ActiveX control provided with the McAfee ePolicy Orchestrator and ProtectionPilot software could allow a remote attacker to execute arbitrary code on an affected system. Description The McAfee ePolicy Orchestrator and ProtectionPilot are applications that are design...

Preemptive Protection against McAfee HTTP Server Buffer Overflow Vulnerability

McAfee ePolicy Orchestrator provides proactive defense against malicious threats and attacks. McAfee ProtectionPilot is a centralized system security manager designed specifically for businesses with up to 500 systems.A vulnerability has been reported in McAfee ePolicy Orchestrator and in McAfee...

McAfee EPolicy Orchestrator和ProtectionPilot HTTP Server远程缓冲区溢出漏洞

McAfee Security ePolicy Orchestrator是一款企业级反病毒管理工具。 ePolicy Orchestrator及ProtectionPilot所带的HTTP Server在处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 ePolicy Orchestrator及ProtectionPilot在处理HTTP请求中的超长Source头选项数据时存在缓冲区溢出，远程攻击者可能通过超长的精心构造的数据溢出缓冲区执行任意指令。 0 McAfee ePolicy Orchestrator = 3.5 patch 5 McAfee...

CVE-2006-5156

Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header...

CVE-2006-5156

Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header...

CVE-2006-5156

Summary: CVE-2006-5156 is a buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126. A remote attacker could exploit a long Source header in requests to the McAfee HTTP server to execute arbitrary code. Affected products/versions (as per provided docs)...