CVE-2006-5272

The CVE-2006-5272 issue affects McAfee CMA (Common Management Agent) prior to 3.6.0.546. A stack-based buffer overflow in the CMA component occurs when handling certain ping packets received over the network, enabling a remote attacker to potentially execute arbitrary code. Affected versions incl...

CVE-2006-5156

Summary: CVE-2006-5156 is a buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126. A remote attacker could exploit a long Source header in requests to the McAfee HTTP server to execute arbitrary code. Affected products/versions (as per provided docs)...

CVE-2007-1498

McAfee ePolicy Orchestrator (ePO) SiteManager.dll ActiveX control contains multiple stack-based buffer overflows that allow remote code execution when long arguments are passed to ExportSiteList, VerifyPackageCatalog, or related vectors (via swprintf usage). The affected component is SiteManager....

CVE-2006-5273

The CVE-2006-5273 entry describes a heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5–3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438–3.6.0.453. The vulnerability allows remote attackers to execute arbitrary code via a crafted packet. Connected docume...

CVE-2006-5271

Summary: The McAfee CMA before 3.6.0.546 contains an integer underflow (CVE-2006-5271) that allows unauthenticated, remote code execution via a crafted UDP packet, causing stack corruption. Affected versions include CMA up to 3.6.0.546; the plugin notes this as part of multiple CMA vulnerabilitie...

CVE-2006-5274

CVE-2006-5274 corresponds to an integer overflow in McAfee ePolicy Orchestrator / CMA components (3.5–3.6.1, CMA 3.5.5.438, ProtectionPilot) enabling remote DoS and possible code execution via unspecified vectors. Connected documents also reference CVE-2008-1855, showing CMA 3.6.0.574 Patch 3 and...