CVE-2007-0655

The CVE concerns the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1 (and possibly other versions). Affected component: MWAGENT.EXE running as a service. Vulnerability: remote or local attackers can gain privileges and execute arbitrary commands by connecting dir...

CVE-2007-2687

CVE-2007-2687: A stack-based buffer overflow in MicroWorld Technologies eScan’s MWAGENT.EXE (Agent Service) can be triggered by an overly long command, enabling remote code execution. Secunia details a boundary/overflow condition in the decryption path, with exploitation possible via the service ...

CVE-2008-1221

CVE-2008-1221 describes an absolute path traversal in the FTP server of MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (eScan Server) 9.0.742.1. The vulnerability allows a remote attacker to read arbitrary files via an absolute pathname in the RETR (get) command. Affec...