| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <535CD8E5.7090606@wallaby.be> Date: Sun, 27 Apr 2014 12:16:05 +0200 From: Jérôme Nokin <jerome@...laby.be> To: fulldisclosure@...lists.org Subject: [FD] Exploit: McAfee ePolicy 0wner (ePowner) – Release Hello, ePolicy 0wner is an interesting exploit code which targets multiple weaknesses and security bugs (CVE-2013-0140 and CVE-2013-0141) in the McAfee ePolicy Orchestrator software from versions v4.6.0 to 4.6.6. The tool is able to perform various actions against both the ePO server "and" the managed stations. The most exciting feature is “Software deployment” on the managed stations which can be used to upload and execute anything you like, on any windows boxes managed by the ePO server. Read more here: http://funoverip.net/2014/04/mcafee-epolicy-0wner-0-1-release/ Additional references: https://kc.mcafee.com/corporate/index?page=content&id=sb10042 http://www.kb.cert.org/vuls/id/209131 http://www.us-cert.gov/ncas/alerts/TA13-193A http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0140 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0141 :-) Regards, Jérôme Nokin http://funoverip.net _______________________________________________ Sent through the Full Disclosure mailing list http://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Powered by blists - more mailing lists