VulnerabilityModified
CVE-2006-5156
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header.
HIGH 10.0EPSS 73.6%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 73.6%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 73.59% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- mcafee/epolicy orchestrator · mcafee/protectionpilot
- Source
- cve@mitre.org
References
- http://download.nai.com/products/patches/ePO/v3.5/EPO3506.txtPatch
- http://download.nai.com/products/patches/protectionpilot/v1.1.1/PRP1113.txtPatch
- http://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=8611438&sliceId=SAL_Public&dialogID=2997768&stateId=0%200%202995803Patch
- http://knowledge.mcafee.com/article/365/8611438_f.SAL_Public.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049803.html
- http://secunia.com/advisories/22222Vendor Advisory
- http://securitytracker.com/id?1016970
- http://securitytracker.com/id?1016971
- http://www.kb.cert.org/vuls/id/842452US Government Resource
- http://www.osvdb.org/29421
- http://www.remote-exploit.org/advisories/mcafee-epo.pdfExploit
- http://www.securityfocus.com/bid/20288Exploit, Patch
- http://www.vupen.com/english/advisories/2006/3861
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29307
- http://download.nai.com/products/patches/ePO/v3.5/EPO3506.txtPatch
- http://download.nai.com/products/patches/protectionpilot/v1.1.1/PRP1113.txtPatch
- http://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=8611438&sliceId=SAL_Public&dialogID=2997768&stateId=0%200%202995803Patch
- http://knowledge.mcafee.com/article/365/8611438_f.SAL_Public.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049803.html
- http://secunia.com/advisories/22222Vendor Advisory
- http://securitytracker.com/id?1016970
- http://securitytracker.com/id?1016971
- http://www.kb.cert.org/vuls/id/842452US Government Resource
- http://www.osvdb.org/29421
- http://www.remote-exploit.org/advisories/mcafee-epo.pdfExploit
- http://www.securityfocus.com/bid/20288Exploit, Patch
- http://www.vupen.com/english/advisories/2006/3861
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29307
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.