PT-2015-5197 · Mcafee · Mcafee Data Loss Prevention Endpoint

Parvez · Published 2015-02-06 · Updated 2017-09-08 · CVE-2015-1305

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint (DLPe) versions prior to 9.3.400

Description The issue allows local users to gain privileges by writing to arbitrary memory locations via crafted IOCTL calls, specifically (1) 0x00224014 or (2) 0x0022c018.

Recommendations For versions prior to 9.3.400, update to version 9.3.400 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-1305

Affected Products

Mcafee Data Loss Prevention Endpoint

References · 8

• 🔥 http://greyhathacker.net/?p=818 · Exploit
• 🔥 http://exploit-db.com/exploits/35953 · Exploit
• 🔥 https://exploit-db.com/exploits/35953 · Exploit
• 🔥 http://packetstormsecurity.com/files/130177/McAfee-Data-Loss-Prevention-Endpoint-Privilege-Escalation.html · Exploit
• https://kc.mcafee.com/corporate/index?page=content&id=SB10097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1305 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100602 · Note
• http://osvdb.org/show/osvdb/117345 · Note