medium4.3
CVE-2013-0141
Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files vi…
Impact
Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Epolicy Orchestrator | through 4.5.6 Versions 2.0, 2.5, 2.5.1, 3.0, 3.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2014/Apr/289
- http://www.kb.cert.org/vuls/id/209131
- http://www.us-cert.gov/ncas/alerts/TA13-193A
- https://kc.mcafee.com/corporate/index?page=content&id=SB10042
- http://seclists.org/fulldisclosure/2014/Apr/289
- http://www.kb.cert.org/vuls/id/209131
- http://www.us-cert.gov/ncas/alerts/TA13-193A
- https://kc.mcafee.com/corporate/index?page=content&id=SB10042