mcafee mcafee agent vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions before 5.0.4.449 allows remote malicious users to pass unexpected input parameters via a URL that was not completely validated.

Mcafee Mcafee Agent 5.0.2 Mcafee Mcafee Agent 5.0.3 Mcafee Mcafee Agent 5.0.4 Mcafee Mcafee Agent 5.0.0 Mcafee Mcafee Agent 5.0.1

4.3

CVSSv2

The log viewer in McAfee Agent (MA) prior to 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled, allows remote malicious users to conduct clickjacking attacks via a crafted web page, aka an "http-generic-click-jacking...

Mcafee Mcafee Agent Mcafee Mcafee Agent 5.0.0

5

CVSSv2

Directory traversal vulnerability in the remote log viewing functionality in McAfee Agent (MA) 5.x prior to 5.0.2 allows remote malicious users to obtain sensitive information via unspecified vectors.

Mcafee Mcafee Agent 5.0.0 Mcafee Mcafee Agent 5.0.1

6.5

CVSSv2

McAfee Common Management Agent (CMA) 3.5.5 up to and including 3.5.5.588 and 3.6.0 up to and including 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated users to overwrite arbitrary files by accessing a report-writing ActiveX control COM object.

Mcafee Common Management Agent 3.6.0.595 Mcafee Common Management Agent 3.6.0.574 Mcafee Common Management Agent 3.5.5.588 Mcafee Common Management Agent 3.6.0.569 Mcafee Common Management Agent 3.6.0.546 Mcafee Common Management Agent 3.6.0.438 Mcafee Common Management Agent 3.6.0.603 Mcafee Common Management Agent 3.5.5.577 Mcafee Common Management Agent 3.5.5.580 Mcafee Common Management Agent 3.6.0.453 Mcafee Common Management Agent 3.5.5.438 Mcafee Common Management Agent 3.5.5.568

4.6

CVSSv2

Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 up to and including 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.

Mcafee Agent 5.5.1 Mcafee Agent 5.5.0 Mcafee Agent

4.6

CVSSv2

Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 up to and including 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.

Mcafee Agent 5.5.1 Mcafee Agent 5.5.0 Mcafee Agent

5

CVSSv2

Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 up to and including 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent installation in Linux via unspecified vectors.

Mcafee Agent 5.5.1 Mcafee Agent 5.5.0 Mcafee Agent

4.4

CVSSv2

Denial of Service through Resource Depletion vulnerability in the agent in non-Windows McAfee Agent (MA) 5.0.0 up to and including 5.0.6, 5.5.0, and 5.5.1 allows local users to cause DoS, unexpected behavior, or potentially unauthorized code execution via knowledge of the interna...

Mcafee Agent 5.5.1 Mcafee Agent 5.5.0 Mcafee Agent

5

CVSSv2

Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via specifically crafted UDP packets.

Mcafee Agent Mcafee Agent 5.6.0

4.3

CVSSv2

Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to access sensitive information via remote logging when it is enabled.

Mcafee Agent Mcafee Agent 5.6.0

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook