6 results (0.010 seconds)

CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 0

14 Mar 2017 — Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call. Vulnerabilidad de escalada de privilegios en Intel Security McAfee Application Control (MAC) versiones 7.0 y 6.x permite a atacantes provocar DoS, comportamiento inesperado o potencialmente ejecución de código no autorizada a través de un uso no autorizado de llamada IOC... • https://kc.mcafee.com/corporate/index?page=content&id=SB10175 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 5.9EPSS: 0%CPEs: 6EXPL: 0

14 Mar 2017 — Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 before hotfix 399, 6.1.2 before hotfix 426, and 6.1.3 before hotfix 357 and earlier allows attackers to create a malformed Windows binary that is considered non-executable and is not protected through the whitelisting protection feature via a specific set of circumstances. Ejecución no autorizada de vulnerabilidad bi... • https://kc.mcafee.com/corporate/index?page=content&id=SB10077 • CWE-284: Improper Access Control •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

14 Mar 2017 — Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) 10.2 and earlier allows local users to bypass local security protection via a command-line utility. Vulnerabilidad de elusión de protecciones de aplicaciones en Intel Security McAfee Application Control (MAC) 7.0 y versiones anteriores y Endpoint Security (ENS) 10.2 y versiones anteriores permite a usuarios locales eludir la protección de seguridad local a través de una... • http://www.securityfocus.com/bid/94661 • CWE-284: Improper Access Control •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

14 Mar 2017 — A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions. Una vulnerabilidad de elusión de protección de escritura y ejecución en McAfee (ahora Intel Security) Application Control (MAC) 6.1.0 para Linux y versiones anteriores permite a usuarios autenticados cambiar los binari... • https://kc.mcafee.com/corporate/index?page=content&id=SB10054 • CWE-284: Improper Access Control •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

14 Mar 2017 — A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions. Una vulnerabilidad de elusión de protección de escritura y ejecución en McAfee (ahora Intel Security) Change Control (MCC) 6.1.0 para Linux y versiones anteriores permite a usuarios autenticados cambiar archivos que forman parte de las reglas de protección de escritura ... • https://kc.mcafee.com/corporate/index?page=content&id=SB10054 • CWE-284: Improper Access Control •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0

22 Aug 2012 — McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command. McAfee Application Control y Change Control v5.1.x y v6.0.0 no refuerza los requisitos de la contraseña establecida en ciertas situaciones que implican atributos en la contraseña del fichero, lo que permite a usuarios locales evitar la autenticación ejecutando un... • https://kc.mcafee.com/corporate/index?page=content&id=SB10023 • CWE-264: Permissions, Privileges, and Access Controls •