network associates vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote malicious users to cause a denial of service or execute arbitrary commands.

Network Associates Gauntlet Firewall 4.2 Network Associates Gauntlet Firewall 5.5 Network Associates Webshield 4.0 Network Associates Gauntlet Firewall 4.1 Network Associates Gauntlet Firewall 5.0 Network Associates Webshield E-ppliance 100.0 Network Associates Webshield E-ppliance 300.0

1 EDB exploit

2.1

CVSSv2

The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse.

Network Associates Netshield 4.5 Network Associates Virusscan 4.5

7.5

CVSSv2

NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote malicious users to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments.

Network Associates Webshield Smtp 4.5 Network Associates Webshield Smtp 4.5 Mr1a

5

CVSSv2

Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote malicious users to execute arbitrary commands via a long URL in the HTTPS port.

Network Associates Net Tools Pki Server 1.0 Network Associates Net Tools Pki Server 1.0hotfix1 Network Associates Net Tools Pki Server 1.0hotfix2

1 EDB exploit

5

CVSSv2

Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote malicious users to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.

Network Associates Net Tools Pki Server 1.0hotfix1 Network Associates Net Tools Pki Server 1.0hotfix2 Network Associates Net Tools Pki Server 1.0

1 EDB exploit

7.5

CVSSv2

Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote malicious users to execute arbitrary code via format strings in a URL with a .XUDA extension.

Network Associates Net Tools Pki Server 1.0hotfix1 Network Associates Net Tools Pki Server 1.0 Network Associates Net Tools Pki Server 1.0hotfix2

1 EDB exploit

7.5

CVSSv2

Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 up to and including 6.0 allows remote malicious users to execute arbitrary code via a crafted mail message.

Mcafee Webshield Smtp 4.0 Mcafee Webshield Smtp 4.1 Pgp E-ppliance 300 2.0 Sgi Irix 6.2 Network Associates Gauntlet Firewall 4.2 Network Associates Gauntlet Firewall Unix 5.0 Sgi Irix 6.3 Sgi Irix 6.4 Network Associates Gauntlet Firewall Unix 5.5 Network Associates Gauntlet Firewall Unix 6.0 Sgi Irix 6.5 Pgp E-ppliance 300 1.0 Pgp E-ppliance 300 1.5 Network Associates Mcafee E-ppliance 100 Series Network Associates Mcafee E-ppliance 120 Series

7.5

CVSSv2

Buffer overflow in WebShield SMTP 4.5.44 allows remote malicious users to execute arbitrary commands via a long configuration parameter to the WebShield remote management service.

Network Associates Webshield 4.5.44

5

CVSSv2

The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote malicious users to access the configuration via the GET_CONFIG command.

Network Associates Webshield 4.5.44

5.1

CVSSv2

NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.

Network Associates Virusscan 4.0.2

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook