CVE-2006-5271

Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet, which causes stack corruption.

Score

CVSS 2.0 7.6 High

Status

Modified - cve@mitre.org

Published

2007-07-12

Last modified

2024-08-07

Affected products

• E-business Server (Mcafee)
• Protectionpilot (Mcafee)

References

• http://secunia.com/advisories/26029
• http://www.iss.net/threats/269.html
• http://www.osvdb.org/36098
• http://www.securityfocus.com/bid/24863
• http://www.securitytracker.com/id?1018363
• http://www.vupen.com/english/advisories/2007/2498
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31162
• https://knowledge.mcafee.com/article/761/613364_f.SAL_Public.html