OSVDB ID: 29421

Title: McAfee Multiple Products HTTP /spipe/pkg/ Source Header Remote Overflow

Info

Disclosure
Oct 02, 2006

Discovery
Unknown

Dates

Exploit
Oct 02, 2006

Solution
Unknown

Description

 A remote overflow exists in ePolicy Orchestrator and ProtectionPilot. The product fails to handle requests to /spipe/pkg/ with a long source header resulting in a buffer overflow. With a specially crafted request, an attacker can execute remote arbitrary code resulting in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Public, Exploit Commercial
Disclosure: OSVDB Verified, Vendor Verified
OSVDB: Security Software

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, McAfee has released a patch to address this vulnerability.

Products

McAfee, Inc.

ePolicy Orchestrator

 3.5.0

ProtectionPilot

 1.1.0

References

Credit
  • Mati Aharoni - mutswhitehat.co.il -
  • Moti Joseph -   -


Direct URL: http://osvdb.org/29421