CVE-2011-3007

The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://dvlabs.tippingpoint.com/advisory/TPTI-11-13
http://osvdb.org/74513
https://exchange.xforce.ibmcloud.com/vulnerabilities/69093
https://kc.mcafee.com/corporate/index?page=content&id=SB10016	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mcafee:saas_endpoint_protection:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2011-08-10 20:55

Updated : 2024-02-04 17:54

NVD link : CVE-2011-3007

Mitre link : CVE-2011-3007

CVE.ORG link : CVE-2011-3007

JSON object : View

Products Affected

mcafee

saas_endpoint_protection

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2011-3007", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2011-08-10T20:55:01.783", "references": [{"url": "http://dvlabs.tippingpoint.com/advisory/TPTI-11-13", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/74513", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69093", "source": "cve@mitre.org"}, {"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10016", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method."}, {"lang": "es", "value": "El myCIOScn control ActiveX (myCIOScn.dll) en McAfee Endpoint SaaS Protection v5.2.1 y anteriores, permite a atacantes remotos escribir en archivos arbitrarios especificando un nombre de archivo arbitrario en el par\u00e1metro MyCioScan.Scan.ReportFile, como se ha demostrado mediante la inyecci\u00f3n de secuencias de comandos en un archivo de registro y la ejecuci\u00f3n de c\u00f3digo arbitrario usando el m\u00e9todo de MyCioScan.Scan.Start."}], "lastModified": "2017-08-29T01:29:53.833", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:saas_endpoint_protection:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E4F4E19-908C-47AA-BFB3-68897247B310", "versionEndIncluding": "5.2.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}