Tenable Network Security

	Nessus
	Download
	Plugins
	Newest Plugins
	Obtain an activation code
	View all plugins
	Search
	Documentation
	Register
	Buy Now
	ProfessionalFeed Support
	Bugs
	All the Tenable Products

McAfee Common Management Agent 3.6.0.546 Multiple Vulnerabilities

This script is Copyright (C) 2007-2010 Tenable Network Security, Inc.


Family	CGI abuses
Nessus Plugin ID	25702 (mcafee_cma_3_6_0_546.nasl)
Bugtraq ID	24863
CVE ID	CVE-2006-5271 CVE-2006-5272 CVE-2006-5273 CVE-2006-5274

Description:
Synopsis : The remote web server is affected by multiple vulnerabilties. Description : The remote host is running a Common Management Agent, a component of the ePolicy Orchestrator system security management solution from McAfee. The Common Management Agent on the remote host contains several memory corruption issues due to improper bounds checking. Provided the agent is operating in Managed mode, an unauthenticated remote attacker may be able to exploit these issues to crash the agent, corrupt memory, or even execute arbitrary code remotely with SYSTEM privileges. See also : http://www.iss.net/threats/269.html https://knowledge.mcafee.com/article/761/613364_f.SAL_Public.html https://knowledge.mcafee.com/article/762/613365_f.SAL_Public.html https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html https://knowledge.mcafee.com/article/764/613367_f.SAL_Public.html Solution : Upgrade to Common Management Agent 3.6.0 Patch 1 (3.6.0.546) or later. Risk factor : High / CVSS Base Score : 7.6 (CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C)

This is the web site for the Nessus Vulnerability Scanner from Tenable Network Security. If you are looking for the probabilistic analysis software from Southwest Research Institute, please visit www.nessus.swri.org

McAfee Common Management Agent 3.6.0.546 Multiple Vulnerabilities