Multiple McAfee Products Multiple Security Vulnerabilities
BID:66302
Info
Multiple McAfee Products Multiple Security Vulnerabilities
| Bugtraq ID: | 66302 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-2586 CVE-2014-2587 CVE-2014-2588 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 18 2014 12:00AM |
| Updated: | Mar 26 2014 12:36AM |
| Credit: | Brandon Perry |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Multiple McAfee Products Multiple Security Vulnerabilities
Multiple McAfee products are prone to the following security vulnerabilities:
1. A cross-site scripting vulnerability.
2. Directory-traversal vulnerability.
3. An SQL-injection vulnerability.
An attacker may leverage this issue to allow an attacker to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, to steal cookie-based authentication credentials, or gain access to sensitive information.
Multiple McAfee products are prone to the following security vulnerabilities:
1. A cross-site scripting vulnerability.
2. Directory-traversal vulnerability.
3. An SQL-injection vulnerability.
An attacker may leverage this issue to allow an attacker to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, to steal cookie-based authentication credentials, or gain access to sensitive information.
Exploit / POC
Multiple McAfee Products Multiple Security Vulnerabilities
Attackers can exploit this issue using a browser or readily available tools. To exploit the cross-site scripting issue an attacker must entice an unsuspecting user to follow a malicious URI.
Attackers can exploit this issue using a browser or readily available tools. To exploit the cross-site scripting issue an attacker must entice an unsuspecting user to follow a malicious URI.
Solution / Fix
Multiple McAfee Products Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Multiple McAfee Products Multiple Security Vulnerabilities
References:
References: