773 matches found
CVE-2011-5101
The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam...
CVE-2011-5101
The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam...
CVE-2011-5101
The CVE-2011-5101 entry concerns the Rumor technology in McAfee SaaS Endpoint Protection (pre-5.2.4). The available documents specify that this component allows remote attackers to relay email messages via unspecified vectors, demonstrated by relaying spam. The exact affected versions are McAfee ...
McAfee Security-as-a-Service (SaaS) < 5.2.2 ActiveX Controls Arbitrary Code Execution (SB10016)
Multiple ActiveX controls, installed on the remote Windows host as part of McAfee Security-as-a-Service SaaS / Total Protection Service, are potentially affected by the following issues : - A flaw in the MyAsUtil.dll ActiveX control can be exploited to execute arbitrary commands. - A flaw in the...
McAfee Security-as-a-Service (SaaS) mcCIOScn.dll ShowReport Method Remote Command Execution
The myCIOScn.dll ActiveX control, installed on the remote Windows host as part of McAfee Security-as-a-Service SaaS / Total Protection Service, reportedly does not require authentication before executing arbitrary commands passed to its 'ShowReport' method. If an attacker can trick a user on the...
McAfee SaaS MyCioScan ShowReport Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
McAfee SaaS MyCioScan ShowReport Remote Command Execution
This module exploits a vulnerability found in McAfee Security-as-a-Service. The ShowReport function located in the myCIOScn.dll ActiveX component fails to check the FileName argument, and passes it on to a ShellExecuteW function, therefore allows any malicious attacker to execute any process that...
McAfee SaaS MyCioScan ShowReport - Remote Command Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "McAfee SaaS...
McAfee SaaS ActiveX code execution
MyCioScan.Scan.ShowReport method code execution...
ZDI-12-012 : (0Day) McAfee SaaS myCIOScn.dll ShowReport Method Remote Command Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-012 : 0Day McAfee SaaS myCIOScn.dll ShowReport Method Remote Command Execution http://www.zerodayinitiative.com/advisories/ZDI-12-012 January 12, 2012 - -- CVE ID: - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C - -- Affected Vendors: McAfee - --...
(0Day) McAfee SaaS myCIOScn.dll ShowReport Method Remote Command Execution
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Security-as-a-Service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exists within...
McAfee SaaS Endpoint Protection ActiveX Controls Multiple Code Execution Vulnerabilities
This host is installed with McAfee SaaS Endpoint Protection and is prone to multiple code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmcafeesaasendpointprotectionmultcodeexecvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ McAfee SaaS Endpoint Protection ActiveX Controls Multiple...
McAfee SaaS Endpoint Protection Version Detection (Windows)
This script finds the installed McAfee SaaS Endpoint Protection version and saves the result in KB. OpenVAS Vulnerability Test $Id: secpodmcafeesaasendpointprotectiondetect.nasl 7293 2017-09-27 08:49:48Z cfischer $ McAfee SaaS Endpoint Protection Version Detection Windows Authors: Sooraj KS...
McAfee SaaS Endpoint Protection Detection (Windows SMB Login)
This script finds the installed McAfee SaaS Endpoint Protection version. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
McAfee SaaS Endpoint Protection ActiveX Controls Multiple Code Execution Vulnerabilities
McAfee SaaS Endpoint Protection is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2011-3007
The myCIOScn ActiveX control myCIOScn.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing...
CVE-2011-3006
The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the MyASUtil.SecureObjectFactory.CreateSecureObject domain execution policy using a cross-site scripting XSS attack, execute arbitrary code using the...
Design/Logic Flaw
The myCIOScn ActiveX control myCIOScn.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing...
CVE-2011-3007
The myCIOScn ActiveX control myCIOScn.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing...
CVE-2011-3007
CVE-2011-3007 affects McAfee SaaS Endpoint Protection (ActiveX control myCIOScn.dll) versions 5.2.1 and earlier. The vulnerability arises in the MyCioScan.Scan.ReportFile parameter, which allows remote attackers to specify an arbitrary filename, enabling writing to arbitrary files. Documented imp...