PT-2015-5197 · Mcafee · Mcafee Data Loss Prevention Endpoint

Parvez · Publicado 2015-02-06 · Atualizado 2017-09-08 · CVE-2015-1305

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint (DLPe) versions prior to 9.3.400

Description The issue allows local users to gain privileges by writing to arbitrary memory locations via crafted IOCTL calls, specifically (1) 0x00224014 or (2) 0x0022c018.

Recommendations For versions prior to 9.3.400, update to version 9.3.400 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1305

Produtos afetados

Mcafee Data Loss Prevention Endpoint

Referências · 8

• 🔥 http://greyhathacker.net/?p=818 · Exploit
• 🔥 http://exploit-db.com/exploits/35953 · Exploit
• 🔥 https://exploit-db.com/exploits/35953 · Exploit
• 🔥 http://packetstormsecurity.com/files/130177/McAfee-Data-Loss-Prevention-Endpoint-Privilege-Escalation.html · Exploit
• https://kc.mcafee.com/corporate/index?page=content&id=SB10097 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100602 · Nota
• http://osvdb.org/show/osvdb/117345 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1305 · Nota de Segurança