CVE-2006-5271
Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet, which causes stack…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.00%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet, which causes stack corruption.
- CVSS 2.0
- 7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
- EPSS
- 4.00% probability · 90th percentile
- CISA KEV
- Not listed
- Affected
- mcafee/e-business server · mcafee/protectionpilot
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/26029Vendor Advisory
- http://www.iss.net/threats/269.html
- http://www.osvdb.org/36098
- http://www.securityfocus.com/bid/24863
- http://www.securitytracker.com/id?1018363
- http://www.vupen.com/english/advisories/2007/2498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31162
- https://knowledge.mcafee.com/article/761/613364_f.SAL_Public.html
- http://secunia.com/advisories/26029Vendor Advisory
- http://www.iss.net/threats/269.html
- http://www.osvdb.org/36098
- http://www.securityfocus.com/bid/24863
- http://www.securitytracker.com/id?1018363
- http://www.vupen.com/english/advisories/2007/2498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31162
- https://knowledge.mcafee.com/article/761/613364_f.SAL_Public.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.