PT-2007-1177 · Mcafee · Mcafee Epolicy Orchestrator

Publicado

2007-07-12

·

Atualizado

2017-07-20

·

CVE-2006-5271

CVSS v2.0

7.6

Alta

VetorAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: McAfee ePolicy Orchestrator versions 3.5 through 3.6.1 ProtectionPilot versions 1.1.1 and 1.5 Common Management Agent (CMA) versions 3.6.0.453 and earlier
Description: The issue is caused by an integer underflow that allows remote attackers to execute arbitrary code via a crafted UDP packet, resulting in stack corruption.
Recommendations: For McAfee ePolicy Orchestrator versions 3.5 through 3.6.1, update to a version later than 3.6.1 to resolve the issue. For ProtectionPilot versions 1.1.1 and 1.5, update to a version later than 1.5 to resolve the issue. For Common Management Agent (CMA) versions 3.6.0.453 and earlier, update to a version later than 3.6.0.453 to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-5271

Produtos afetados

Mcafee Epolicy Orchestrator