CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Network Associates : Security Vulnerabilities

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2005-2554 2005-08-12 2008-09-05
2.1
None Local Low Not required Partial None None
The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory.
2 CVE-2002-2224 DoS Exec Code Overflow 2002-12-31 2008-09-05
5.1
User Remote High Not required Partial Partial Partial
Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.
3 CVE-2002-1121 Bypass 2002-09-24 2008-09-10
7.5
User Remote Low Not required Partial Partial Partial
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.
4 CVE-2001-1542 Exec Code Bypass 2001-12-31 2008-09-05
7.5
User Remote Low Not required Partial Partial Partial
NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments.
5 CVE-2001-1456 119 Exec Code Overflow 2001-09-04 2008-09-10
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message.
6 CVE-2000-1160 DoS 2001-01-09 2008-09-05
5.0
None Remote Low Not required None None Partial
NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests.
7 CVE-2000-1159 +Priv 2001-01-09 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands.
8 CVE-2000-1158 2001-01-09 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords.
9 CVE-2000-1157 Exec Code Overflow 2001-01-09 2008-09-05
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.
10 CVE-2000-1130 Bypass 2001-01-09 2008-09-05
7.5
User Remote Low Not required Partial Partial Partial
McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment.
11 CVE-2000-1129 DoS 2001-01-09 2008-09-05
5.0
None Remote Low Not required None None Partial
McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.
12 CVE-2000-0741 Exec Code 2000-10-20 2008-09-05
7.5
User Remote Low Not required Partial Partial Partial
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension.
13 CVE-2000-0740 Exec Code Overflow 2000-10-20 2008-09-05
5.0
None Remote Low Not required None None Partial
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port.
14 CVE-2000-0739 Dir. Trav. 2000-10-20 2008-09-05
5.0
None Remote Low Not required None Partial None
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.
15 CVE-2000-0738 DoS 2000-10-20 2008-09-05
5.0
None Remote Low Not required None None Partial
WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end, which causes WebShield to continuously send itself copies of the e-mail.
16 CVE-2000-0650 Exec Code 2000-07-11 2008-09-05
2.1
None Local Low Not required None Partial None
The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse.
17 CVE-2000-0529 DoS 2000-06-19 2008-09-05
5.0
None Remote Low Not required None None Partial
Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.
18 CVE-2000-0528 2000-06-19 2008-09-05
5.0
None Remote Low Not required None Partial None
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files.
19 CVE-2000-0448 2000-05-01 2008-09-10
5.0
None Remote Low Not required Partial None None
The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command.
20 CVE-2000-0447 Exec Code Overflow 2000-05-01 2008-09-10
7.5
User Remote Low Not required Partial Partial Partial
Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service.
21 CVE-2000-0437 DoS Exec Code Overflow 2000-05-18 2008-09-10
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.
22 CVE-1999-1195 1999-05-05 2008-09-05
5.1
None Remote High Not required Partial Partial Partial
NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.
23 CVE-1999-0683 DoS 1999-07-30 2008-09-09
5.0
None Remote Low Not required None None Partial
Denial of service in Gauntlet Firewall via a malformed ICMP packet.
Total number of vulnerabilities : 23   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.