McAfee Network Data Loss Prevention 'Domain' Field Local Denial of Service Vulnerability

Bugtraq ID:	61348
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 11 2013 12:00AM
Updated:	Jul 11 2013 12:00AM
Credit:	Graeme Bell and Jamie Ooi of BAE Systems Detica
Vulnerable:
Not Vulnerable:

McAfee Network Data Loss Prevention 'Domain' Field Local Denial of Service Vulnerability

McAfee Network Data Loss Prevention is prone to a denial-of-service vulnerability.

Local attackers can exploit this issue to crash the application resulting in a denial-of-service condition.

The following versions are vulnerable:

McAfee Network Data Loss Prevention 8.6 and prior
McAfee Network Data Loss Prevention 9.2.0
McAfee Network Data Loss Prevention 9.2.1

McAfee Network Data Loss Prevention 'Domain' Field Local Denial of Service Vulnerability

The researcher who discovered this issue has created a proof-of-concept to demonstrate the issue. The exploit is otherwise not publicly available.

McAfee Network Data Loss Prevention 'Domain' Field Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

McAfee Network Data Loss Prevention 'Domain' Field Local Denial of Service Vulnerability

References: