CVE-2006-5156

Published: Oct 5, 2006Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header.

Affected (4)

Products: Mcafee: Epolicy Orchestrator, Protectionpilot

2 products

Epolicy Orchestrator

Protectionpilot

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mcafee Epolicy Orchestrator	Version 3.0
Mcafee Epolicy Orchestrator	Version 3.0 sp2a
Mcafee Epolicy Orchestrator	Version 3.5.0
Mcafee Protectionpilot	Version 1.1.1

References (28)

http://download.nai.com/products/patches/ePO/v3.5/EPO3506.txt

Source: cve@mitre.org

Patch

http://download.nai.com/products/patches/protectionpilot/v1.1.1/PRP1113.txt

Source: cve@mitre.org

Patch

http://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=8611438&sliceId=SAL_Public&dialogID=2997768&stateId=0%200%202995803

Source: cve@mitre.org

Patch

http://knowledge.mcafee.com/article/365/8611438_f.SAL_Public.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049803.html

Source: cve@mitre.org

http://secunia.com/advisories/22222

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016970

Source: cve@mitre.org

http://securitytracker.com/id?1016971

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/842452

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/29421

Source: cve@mitre.org

http://www.remote-exploit.org/advisories/mcafee-epo.pdf

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/20288

Source: cve@mitre.org

ExploitPatch

http://www.vupen.com/english/advisories/2006/3861

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29307

Source: cve@mitre.org

http://download.nai.com/products/patches/ePO/v3.5/EPO3506.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://download.nai.com/products/patches/protectionpilot/v1.1.1/PRP1113.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=8611438&sliceId=SAL_Public&dialogID=2997768&stateId=0%200%202995803

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://knowledge.mcafee.com/article/365/8611438_f.SAL_Public.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049803.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22222

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1016970

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016971

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/842452

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.osvdb.org/29421

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.remote-exploit.org/advisories/mcafee-epo.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/20288

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.vupen.com/english/advisories/2006/3861

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/29307

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.