vendor:
ePolicy Orchestrator, ProtectionPilot
by:
muts, xbxice, hdm, patrick
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: ePolicy Orchestrator, ProtectionPilot
Affected Version From: 2.5.2001
Affected Version To: 3.5.2000
Patch Exists: NO
Related CWE: CVE-2006-5156
CPE: a:mcafee:epolicy_orchestrator:2.5.1 cpe:/a:mcafee:protectionpilot:1.1.0
Platforms Tested: Windows
McAfee ePolicy Orchestrator / ProtectionPilot Overflow
This is an exploit for the McAfee HTTP Server (NAISERV.exe). McAfee ePolicy Orchestrator 2.5.1 <= 3.5.0 and ProtectionPilot 1.1.0 are known to be vulnerable. By sending a large 'Source' header, the stack can be overwritten. This module is based on the exploit by xbxice and muts. Due to size constraints, this module uses the Egghunter technique.
Mitigation:
Update to a patched version of McAfee ePolicy Orchestrator or ProtectionPilot.