McAfee Network Agent Remote Denial of Service Vulnerability

Bugtraq ID:	20496
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 12 2006 12:00AM
Updated:	Oct 13 2006 06:59PM
Credit:	JAAScois is credited with discovering this issue.
Vulnerable:	McAfee Network Agent 1.0.178.0
Not Vulnerable:

McAfee Network Agent Remote Denial of Service Vulnerability

McAfee Network Agent is prone to a remote denial-of-service vulnerability because the service fails to properly handle excessive network data.

Exploiting this issue may cause the affected application to crash, denying service to legitimate users.

Version 1.0.178.0 is vulnerable; other versions may also be affected.

McAfee Network Agent Remote Denial of Service Vulnerability

Attackers may exploit this issue using standard networking tools.

McAfee Network Agent Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

McAfee Network Agent Remote Denial of Service Vulnerability

References:

• McAfee Homepage (McAfee)
  
• Mcafee Network Agent (mcnasvc.exe) Remote DoS (Alexander Hristov)